Linux Kernel Memory Block Reference Leak Vulnerability

Vulnerability

A memory block reference leak vulnerability has been identified in the Linux kernel's memory hotplug management. This issue arises in the 'remove_memory_blocks_and_altmaps' function, where the 'find_memory_block' method acquires a reference to the memory block device but fails to release it. As a result, the reference leak occurs when memory blocks and their alternative maps are removed. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability leads to a memory block device reference leak, which can cause resource management issues by not properly releasing references to memory block devices that are no longer needed.

Reproduction

The vulnerability can be reproduced by removing memory blocks and their alternative maps using the 'remove_memory_blocks_and_altmaps' function. This function will acquire a reference to the memory block device, which is not dropped before the memory block is removed, causing a reference leak.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Jul 19, 2026, 4:32 PM
Updated: Jul 19, 2026, 4:32 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
9.9
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.