cve-2026-64182

MEDIUM CVSS 5.5 opencve
Description

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_by_id(), which acquires a reference to the memory block device. Both helpers use the returned memory block without dropping that reference, leaking the device reference on each successful lookup. Drop the reference after updating nr_hwpoison.

Timeline
Published
2026-07-19 16:18 UTC
Last Modified
2026-08-11
CVSS Details

CVSS details not available.

Affected Products

No product information available.

Weaknesses (CWE)
CWE-772
CVSS metrics
Version Base Severity Vector Exploitability Impact Source
3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H nvd
3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H opencve
3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H redhat
References

No references available.

Linked Vulnerabilities
alas2023-2026-1881 amazon_linux
alas2023-2026-1894 amazon_linux 

{
  "advisories": [
    {
      "id": "USN-8593-1",
      "source": "usn",
      "title": "Linux kernel vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8593-1"
    },
    {
      "id": "USN-8603-1",
      "source": "usn",
      "title": "Linux kernel (Azure) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8603-1"
    },
    {
      "id": "USN-8618-1",
      "source": "usn",
      "title": "Linux kernel vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8618-1"
    },
    {
      "id": "USN-8663-1",
      "source": "usn",
      "title": "Linux kernel (NVIDIA) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8663-1"
    },
    {
      "id": "USN-8664-1",
      "source": "usn",
      "title": "Linux kernel (NVIDIA BaseOS) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8664-1"
    },
    {
      "id": "USN-8728-1",
      "source": "usn",
      "title": "Linux kernel (GCP) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8728-1"
    },
    {
      "id": "USN-8729-1",
      "source": "usn",
      "title": "Linux kernel vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8729-1"
    },
    {
      "id": "USN-8761-1",
      "source": "usn",
      "title": "Linux kernel (Azure) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8761-1"
    },
    {
      "id": "USN-8729-2",
      "source": "usn",
      "title": "Linux kernel (Raspberry Pi Real-time) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8729-2"
    },
    {
      "id": "USN-8761-2",
      "source": "usn",
      "title": "Linux kernel (Azure FIPS) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8761-2"
    },
    {
      "id": "USN-8781-1",
      "source": "usn",
      "title": "Linux kernel (NVIDIA Tegra) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8781-1"
    },
    {
      "id": "USN-8729-3",
      "source": "usn",
      "title": "Linux kernel vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8729-3"
    },
    {
      "id": "USN-8802-1",
      "source": "usn",
      "title": "Linux kernel (Oracle) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8802-1"
    },
    {
      "id": "USN-8728-2",
      "source": "usn",
      "title": "Linux kernel (Azure) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8728-2"
    },
    {
      "id": "USN-8729-4",
      "source": "usn",
      "title": "Linux kernel (Low Latency) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8729-4"
    },
    {
      "id": "USN-8729-5",
      "source": "usn",
      "title": "Linux kernel (AWS FIPS) vulnerabilities",
      "url": "https://ubuntu.com/security/notices/USN-8729-5"
    }
  ],
  "cve": "CVE-2026-64182",
  "enrichment": {
    "affected": [
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "code_commit",
              "value": "[5033091de814ab4b5623faed2755f3064e19e2d2,686b4283f82cd630fafd7ca9b03dfc080b3ec8fa)"
            }
          },
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "code_commit",
              "value": "[5033091de814ab4b5623faed2755f3064e19e2d2,ce60d9452a0f2effa72fd20ea270c59ca691d455)"
            }
          },
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "code_commit",
              "value": "[5033091de814ab4b5623faed2755f3064e19e2d2,24840b3139d7415144b81e4f9f4c44670d15bed9)"
            }
          },
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "code_commit",
              "value": "[5033091de814ab4b5623faed2755f3064e19e2d2,8502e2c2d0633f99d94d22ae8dabc10caae1fc2a)"
            }
          },
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "code_commit",
              "value": "[5033091de814ab4b5623faed2755f3064e19e2d2,03a2cc1756a0570f887d624cd6c535ea0cbd4951)"
            }
          }
        ],
        "enrichment": {
          "confidence": 99.0,
          "confidence_source": "inferred",
          "scores": [
            {
              "score": 99.0,
              "source": "inferred"
            },
            {
              "score": 100.0,
              "source": "matching"
            }
          ]
        },
        "original": {
          "product": "Linux",
          "source": "cna",
          "vendor": "Linux"
        },
        "product": "linux_kernel",
        "vendor": "linux"
      },
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "generic",
              "value": "6.2"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "generic",
              "value": "[0,6.2)"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "semver",
              "value": "[6.6.142,7.0.0)"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "semver",
              "value": "[6.12.92,7.0.0)"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "semver",
              "value": "[6.18.34,7.0.0)"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "semver",
              "value": "[7.0.11,8.0.0)"
            }
          },
          {
            "platform": null,
            "status": "unaffected",
            "versions": {
              "scheme": "generic",
              "value": "[7.1,*]"
            }
          }
        ],
        "enrichment": {
          "confidence": 99.0,
          "confidence_source": "inferred",
          "scores": [
            {
              "score": 99.0,
              "source": "inferred"
            },
            {
              "score": 100.0,
              "source": "matching"
            }
          ]
        },
        "original": {
          "product": "Linux",
          "source": "cna",
          "vendor": "Linux"
        },
        "product": "linux_kernel",
        "vendor": "linux"
      }
    ],
    "created": "2026-07-21T19:30:10.972029+00:00",
    "updated": "2026-08-13T12:45:03.412734+00:00",
    "vendors": [
      "linux",
      "linux$PRODUCT$linux_kernel"
    ]
  },
  "epss": {
    "score": 0.00162
  },
  "mitre": {
    "cpes": [
      "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
    ],
    "created": "2026-07-19T15:41:05.186000+00:00",
    "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {}
    },
    "mitre_repo_path": "cves/2026/64xxx/CVE-2026-64182.json",
    "references": [
      "https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951",
      "https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9",
      "https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa",
      "https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a",
      "https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455"
    ],
    "title": "drivers/base/memory: fix memory block reference leak in poison accounting",
    "updated": "2026-07-19T15:41:05.186000+00:00",
    "vendors": [
      "linux",
      "linux$PRODUCT$linux_kernel"
    ],
    "weaknesses": []
  },
  "nvd": {
    "cpes": [
      "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
      "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*",
      "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*",
      "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*",
      "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"
    ],
    "created": "2026-07-19T16:18:00.600000+00:00",
    "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 5.5,
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      },
      "cvssV4_0": {}
    },
    "nvd_repo_path": "2026/CVE-2026-64182.json",
    "references": [
      "https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951",
      "https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9",
      "https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa",
      "https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a",
      "https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455"
    ],
    "title": null,
    "updated": "2026-08-11T20:06:47.897000+00:00",
    "vendors": [
      "linux",
      "linux$PRODUCT$linux_kernel"
    ],
    "weaknesses": [
      "NVD-CWE-Other"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2026-07-19T16:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.",
              "old": null
            },
            "type": "description"
          },
          {
            "details": {
              "new": "drivers/base/memory: fix memory block reference leak in poison accounting",
              "old": null
            },
            "type": "title"
          },
          {
            "details": [
              "linux",
              "linux$PRODUCT$linux_kernel"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "linux",
                "linux$PRODUCT$linux_kernel"
              ],
              "removed": []
            },
            "type": "vendors"
          },
          {
            "details": {
              "added": [
                "https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951",
                "https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9",
                "https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa",
                "https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a",
                "https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455"
              ],
              "removed": []
            },
            "type": "references"
          }
        ],
        "id": "a3b0eccd-3c8c-464d-8396-54a297e1f67e"
      },
      {
        "created": "2026-07-21T00:15:00+00:00",
        "data": [
          {
            "details": {
              "added": [
                "CWE-772"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "https://lore.kernel.org/linux-cve-announce/2026071938-CVE-2026-64182-c1a7@gregkh/T",
                "https://nvd.nist.gov/vuln/detail/CVE-2026-64182",
                "https://www.cve.org/CVERecord?id=CVE-2026-64182"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV3_1": {
                  "score": 5.5,
                  "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              },
              "removed": {},
              "updated": {
                "threat_severity": {
                  "new": "Low",
                  "old": null
                }
              }
            },
            "type": "metrics"
          }
        ],
        "id": "9b042e8d-e1da-4088-b0cd-3f803bbe8526"
      },
      {
        "created": "2026-08-11T20:15:00+00:00",
        "data": [
          {
            "details": {
              "added": [
                "NVD-CWE-Other"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*",
                "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*",
                "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*",
                "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          }
        ],
        "id": "3b5914a0-a09e-4488-b113-8a856e168aa8"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
        "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*",
        "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*",
        "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "created": {
      "data": "2026-07-19T00:00:00+00:00",
      "provider": "redhat"
    },
    "description": {
      "data": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_1": {
        "data": {
          "score": 5.5,
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        },
        "provider": "nvd"
      },
      "cvssV4_0": {
        "data": {},
        "provider": null
      },
      "epss": {
        "data": {
          "score": 0.00162
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {},
        "provider": null
      },
      "threat_severity": {
        "data": "Low",
        "provider": "redhat"
      }
    },
    "references": {
      "data": [
        "https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951",
        "https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9",
        "https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa",
        "https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a",
        "https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455",
        "https://lore.kernel.org/linux-cve-announce/2026071938-CVE-2026-64182-c1a7@gregkh/T",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64182",
        "https://www.cve.org/CVERecord?id=CVE-2026-64182"
      ],
      "providers": [
        "mitre",
        "nvd",
        "redhat"
      ]
    },
    "title": {
      "data": "drivers/base/memory: fix memory block reference leak in poison accounting",
      "provider": "mitre"
    },
    "updated": {
      "data": "2026-08-11T20:06:47.897000+00:00",
      "provider": "nvd"
    },
    "vendors": {
      "data": [
        "linux",
        "linux$PRODUCT$linux_kernel"
      ],
      "providers": [
        "mitre",
        "nvd",
        "enrichment"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-772",
        "NVD-CWE-Other"
      ],
      "providers": [
        "nvd",
        "redhat"
      ]
    }
  },
  "redhat": {
    "cpes": [],
    "created": "2026-07-19T00:00:00+00:00",
    "description": "In the Linux kernel, the following vulnerability has been resolved:\ndrivers/base/memory: fix memory block reference leak in poison accounting\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 5.5,
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      },
      "threat_severity": "Low"
    },
    "redhat_repo_path": "2026/CVE-2026-64182.json",
    "references": [
      "https://lore.kernel.org/linux-cve-announce/2026071938-CVE-2026-64182-c1a7@gregkh/T",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-64182",
      "https://www.cve.org/CVERecord?id=CVE-2026-64182"
    ],
    "title": "kernel: drivers/base/memory: fix memory block reference leak in poison accounting",
    "updated": "2026-07-19T00:00:00+00:00",
    "vendors": [],
    "weaknesses": [
      "CWE-772"
    ]
  }
}
Enrichment data
EPSS
View JSON Download
CISA KEV
View JSON Download
Aggregated bundle (all enrichments)
View JSON API Download bundle
View JSON API Download JSON