PT-2026-72815
CVE-2026-74379
·
Published
2026-02-23
·
Updated
2026-11-06
Description by
CVSS 2.0
4.6
MediumMetricsAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the dax/kmem component where the
dev dax kmem probe() function may partially succeed by mapping at least one range, but fail on subsequent ranges during request mem region() or add memory driver managed(). In such cases, the probe returns success while leaving the corresponding range resource as a NULL pointer. Subsequently, the dev dax kmem remove() function iterates through all ranges without verifying the existence of the underlying resource. When remove memory() is called, it returns 0 because the memory was never added, leading dev dax kmem remove() to attempt cleanup on the NULL pointer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾