dax/kmem: account for partial discontiguous resource upon removal (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the probe silently continues, ultimately returning success, but with the corresponding range resource NULL'ed out. dev_dax_kmem_remove() iterates over all dax_device ranges regardless of if the underlying resource exists. When remove_memory() is called later, it returns 0 because the memory was never added which causes dev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can be removed and attempts cleanup on a NULL pointer. Fix this by skipping these ranges altogether, noting that these cases are considered success, such that the cleanup is still reached when all actually-added ranges are successfully removed.
References
- https://git.kernel.org/stable/c/ef4fc53898bd6c4d0119cc6d419ebef7f2560f31
- https://git.kernel.org/stable/c/5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb
- https://git.kernel.org/stable/c/d47b0b8a69a13e06afafa54723f3e8c99b0c788f
- https://git.kernel.org/stable/c/799e54c510a03a65a57627018a817838d72f35bd
- https://git.kernel.org/stable/c/598ed7393a639c7547b28ff3e14db9f1ac37c132
- https://git.kernel.org/stable/c/30ea97affbcce236c57287c82dc6ef7a29c63b76
- https://git.kernel.org/stable/c/8aa442cfce79e2d69e72fc8e0c0864ac2971149d
European references
- ENISA EUVD · EUVD-2026-59526
- GCVE · GCVE-0-2026-74379
CERT-FR advisories
- CERTFR-2026-AVI-1432 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < ef4fc53898bd6c4d0119cc6d419ebef7f2560f31 ; affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < 5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb ; affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < d47b0b8a69a13e06afafa54723f3e8c99b0c788f ; affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < 799e54c510a03a65a57627018a817838d72f35bd ; affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < 598ed7393a639c7547b28ff3e14db9f1ac37c132 ; affected 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 < 30ea97affbcce236c57287c82dc6ef7a29c63b76 |
| Linux · Linux | affected 5.10 ; unaffected 0 < 5.10 ; unaffected 5.15.212 ≤ 5.15.* ; unaffected 6.1.178 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* ; unaffected 6.12.97 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |