news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-64182

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.5 Medium
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.11%
Risk score
0.9
Published
2026-07-19
Status
Published

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_by_id(), which acquires a reference to the memory block device. Both helpers use the returned memory block without dropping that reference, leaking the device reference on each successful lookup. Drop the reference after updating nr_hwpoison. A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks (`memblk_nr_poison_inc()` and `memblk_nr_poison_sub()`) fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous leak of device references, which could eventually exhaust system resources and result in a denial of service (DoS) condition.

Weaknesses

CWE-772

Coverage 5

Advisories and references