5.5

CVE-2026-64244

drivers/base/memory: set mem->altmap after successful device registration

In the Linux kernel, the following vulnerability has been resolved:

drivers/base/memory: set mem->altmap after successful device registration

If __add_memory_block() fails at xa_store() (under memory pressure for
example), device_unregister() is called, which eventually triggers
memory_block_release() with mem->altmap still set, causing a
WARN_ON(mem->altmap).  This was triggered by modifying virtio-mem driver.

Fix this by delaying the assignment of mem->altmap until after
__add_memory_block() has succeeded.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.6 < 6.6.144
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.95
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.37
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.14
Linux ≫ Linux Kernel Version >= 7.1 < 7.1.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.018
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/802e113cf120df7208e4c7e604950a85e87120a8
Patch
https://git.kernel.org/stable/c/22dc0d042f02ce82aa61422ea5f232628bfd9e9c
Patch
https://git.kernel.org/stable/c/6c25bf4e44a2b6a14332f952bba0974521f5b72d
Patch
https://git.kernel.org/stable/c/bc3dd82a0ffd488bb902f4c69c3d28fd4088d973
Patch
https://git.kernel.org/stable/c/059ac6252a63edf1cea79bf30bd860a8c264b62c
Patch
https://git.kernel.org/stable/c/a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a
Patch