Strix
26.1K

CVE-2026-64244

UnknownEPSS 0.16%

Last modified

CVE-2026-64244 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at xa_store() (under memory pressure for example), device_unregister() is called, which eventually triggers memory_block_release() with mem->altmap still set, causing a WARN_ON(mem->altmap). This was triggered by modifying virtio-mem driver. Fix this by delaying the assignment of mem->altmap until after __add_memory_block() has succeeded.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at xa_store() (under memory pressure for example), device_unregister() is called, which eventually triggers memory_block_release() with mem->altmap still set, causing a WARN_ON(mem->altmap). This was triggered by modifying virtio-mem driver. Fix this by delaying the assignment of mem->altmap until after __add_memory_block() has succeeded.

Metrics

EPSS Probability
0.16%

5.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1a8c64e110435e44e71bcd50a75663174b575f22, < 802e113cf120df7208e4c7e604950a85e87120a8; >= 1a8c64e110435e44e71bcd50a75663174b575f22, < 22dc0d042f02ce82aa61422ea5f232628bfd9e9c; >= 1a8c64e110435e44e71bcd50a75663174b575f22, < 6c25bf4e44a2b6a14332f952bba0974521f5b72d; >= 1a8c64e110435e44e71bcd50a75663174b575f22, < bc3dd82a0ffd488bb902f4c69c3d28fd4088d973; >= 1a8c64e110435e44e71bcd50a75663174b575f22, < 059ac6252a63edf1cea79bf30bd860a8c264b62c; >= 1a8c64e110435e44e71bcd50a75663174b575f22, < a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a
LinuxLinux6.6

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-64244?
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at xa_store() (under memory pressure for example), device_unregister() is called, which eventually triggers memory_block_release() with mem->altmap still set, causing a WARN_ON(mem->altmap). This was triggered by modifying virtio-mem driver. Fix this by delaying the assignment of mem->altmap until after __add_memory_block() has succeeded.
How severe is CVE-2026-64244?
Severity scoring for CVE-2026-64244 is pending analysis. The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2026-64244?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-64244?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST