Memory Block Device Reference Leak in Linux Kernel
CVE-2026-64180

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
19 July 2026

What is CVE-2026-64180?

A vulnerability in the Linux kernel's memory management subsystem has been identified, which leads to a memory block device reference leak. This occurs when the removal of memory blocks fails to drop the reference acquired during the lookup process. Particularly, after accessing the auxiliary altmap associated with the memory block, the reference to the memory block device remains intact, potentially resulting in unnecessary resource consumption and destabilization of the system. The issue has been addressed with a patch that ensures proper reference management during the removal of memory blocks.

Affected Version(s)

Linux 6b8f0798b85aa529011570369db985a788f3003f

Linux 6b8f0798b85aa529011570369db985a788f3003f < 09ce923071e7852ece60d7368e05249bf32c7967

Linux 6b8f0798b85aa529011570369db985a788f3003f

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.