CVE-2026-46280

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the HMM kernel selftests. When the dmirror fops release() function is called, it frees the dmirror structure without first migrating device private pages back to system memory. This results in those pages maintaining a dangling zone device data pointer to the freed dmirror structure. If a subsequent fault occurs on these pages, such as during a coredump, the dmirror devmem fault() callback dereferences the stale pointer, leading to a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.