What’s Vulnerable › Vulnerabilities

CVE-2026-64182: drivers/base/memory: fix memory block reference leak in poison accounting

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-19 · updated 2026-08-11

Description

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_by_id(), which acquires a reference to the memory block device. Both helpers use the returned memory block without dropping that reference, leaking the device reference on each successful lookup. Drop the reference after updating nr_hwpoison.

Affected products

• Linux kernel: from 6.2 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1-rc1, 7.1-rc2, 7.1-rc3, 7.1-rc4 — fixed in 6.12.92, 6.18.34, 6.6.142, 7.0.11

How to fix

Upgrade to a fixed version: Linux kernel 6.12.92, 6.18.34, 6.6.142, 7.0.11. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951
• https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9
• https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa
• https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a
• https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455

Get alerted when CVE-2026-64182 or the next vulnerability affects your stack