PT-2026-72815

CVE-2026-74379

·

Published

2026-02-23

·

Updated

2026-11-06

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the dax/kmem component where the dev dax kmem probe() function may partially succeed by mapping at least one range, but fail on subsequent ranges during request mem region() or add memory driver managed(). In such cases, the probe returns success while leaving the corresponding range resource as a NULL pointer. Subsequently, the dev dax kmem remove() function iterates through all ranges without verifying the existence of the underlying resource. When remove memory() is called, it returns 0 because the memory was never added, leading dev dax kmem remove() to attempt cleanup on the NULL pointer.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:22167-1
SUSE-SU-2026:24371-1
SUSE-SU-2026:24379-1
SUSE-SU-2026:24386-1
SUSE-SU-2026:24422-1
SUSE-SU-2026:24437-1
SUSE-SU-2026:24446-1
SUSE-SU-2026:24473-1
SUSE-SU-2026:24553-1
SUSE-SU-2026:4935-1
SUSE-SU-2026:4940-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
USN-8963-1
USN-9003-1
Found an issue in the description? Have something to add? Feel free to write us 👾