CVE-2026-74379dax/kmem: account for partial discontiguous resource upon removal
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the probe silently continues, ultimately returning success, but with the corresponding range resource NULL'ed out. dev_dax_kmem_remove() iterates over all dax_device ranges regardless of if the underlying resource exists. When remove_memory() is called later, it returns 0 because the memory was never added which causes dev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can be removed and attempts cleanup on a NULL pointer. Fix this by skipping these ranges altogether, noting that these cases are considered success, such that the cleanup is still reached when all actually-added ranges are successfully removed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 before ef4fc53898bd6c4d0119cc6d419ebef7f2560f31; 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 builds before 5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb; from 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 before d47b0b8a69a13e06afafa54723f3e8c99b0c788f; from 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 before 799e54c510a03a65a57627018a817838d72f35bd; from 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 before 598ed7393a639c7547b28ff3e14db9f1ac37c132; 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 builds before 30ea97affbcce236c57287c82dc6ef7a29c63b76; 60e93dc097f7f13a16a7e4b75b8803eb2adbb721 builds before 8aa442cfce79e2d69e72fc8e0c0864ac2971149d | CNA record |
References
- https://git.kernel.org/stable/c/ef4fc53898bd6c4d0119cc6d419ebef7f2560f31
- https://git.kernel.org/stable/c/5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb
- https://git.kernel.org/stable/c/d47b0b8a69a13e06afafa54723f3e8c99b0c788f
- https://git.kernel.org/stable/c/799e54c510a03a65a57627018a817838d72f35bd
- https://git.kernel.org/stable/c/598ed7393a639c7547b28ff3e14db9f1ac37c132
- https://git.kernel.org/stable/c/30ea97affbcce236c57287c82dc6ef7a29c63b76
- https://git.kernel.org/stable/c/8aa442cfce79e2d69e72fc8e0c0864ac2971149d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.