CVE-2026-64182 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_by_id(), which acquires a reference to the memory block device. Both helpers use the returned memory block without dropping that reference, leaking the device reference on each successful lookup. Drop the reference after updating nr_hwpoison.
A vulnerability exists in the Linux kernel's memory management system, specifically within the poison accounting feature. The issue arises in the 'drivers/base/memory' component, where the functions 'memblk_nr_poison_inc()' and 'memblk_nr_poison_sub()' improperly handle references to memory block devices. These functions look up memory blocks by their IDs, acquiring a reference to the corresponding device. However, they fail to release this reference after use, leading to a memory leak with each successful lookup. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951 | kernel.org | Patch |
| https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa | kernel.org | Patch |
| https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a | kernel.org | Patch |
| https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.2, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 11, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |