{"id":"CVE-2026-64182","summary":"drivers/base/memory: fix memory block reference leak in poison accounting","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup.  Drop\nthe reference after updating nr_hwpoison.","modified":"2026-07-21T03:47:06.095275940Z","published":"2026-07-19T15:41:05.186Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64182.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/03a2cc1756a0570f887d624cd6c535ea0cbd4951"},{"type":"WEB","url":"https://git.kernel.org/stable/c/24840b3139d7415144b81e4f9f4c44670d15bed9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/686b4283f82cd630fafd7ca9b03dfc080b3ec8fa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8502e2c2d0633f99d94d22ae8dabc10caae1fc2a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ce60d9452a0f2effa72fd20ea270c59ca691d455"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64182.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64182"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5033091de814ab4b5623faed2755f3064e19e2d2"},{"fixed":"686b4283f82cd630fafd7ca9b03dfc080b3ec8fa"},{"fixed":"ce60d9452a0f2effa72fd20ea270c59ca691d455"},{"fixed":"24840b3139d7415144b81e4f9f4c44670d15bed9"},{"fixed":"8502e2c2d0633f99d94d22ae8dabc10caae1fc2a"},{"fixed":"03a2cc1756a0570f887d624cd6c535ea0cbd4951"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64182.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.142"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.92"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.34"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.11"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64182.json"}}],"schema_version":"1.7.5"}