Medium 5.5Published Jul 24, 2026

CVE-2026-64244drivers/base/memory: set mem->altmap after successful device registration

Updated under an hour ago (Oct 27, 2026, 3:00 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at xa_store() (under memory pressure for example), device_unregister() is called, which eventually triggers memory_block_release() with mem->altmap still set, causing a WARN_ON(mem->altmap). This was triggered by modifying virtio-mem driver. Fix this by delaying the assignment of mem->altmap until after __add_memory_block() has succeeded.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1a8c64e110435e44e71bcd50a75663174b575f22 before 802e113cf120df7208e4c7e604950a85e87120a8; from 1a8c64e110435e44e71bcd50a75663174b575f22 before 22dc0d042f02ce82aa61422ea5f232628bfd9e9c; from 1a8c64e110435e44e71bcd50a75663174b575f22 before 6c25bf4e44a2b6a14332f952bba0974521f5b72d; from 1a8c64e110435e44e71bcd50a75663174b575f22 before bc3dd82a0ffd488bb902f4c69c3d28fd4088d973; from 1a8c64e110435e44e71bcd50a75663174b575f22 before 059ac6252a63edf1cea79bf30bd860a8c264b62c; from 1a8c64e110435e44e71bcd50a75663174b575f22 before a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a	CNA record
linux linux_kernel linux:linux_kernel	from 6.6 before 6.6.144; from 6.7 before 6.12.95; from 6.13 before 6.18.37; from 6.19 before 7.0.14; from 7.1 before 7.1.2	NVD

References

References

https://git.kernel.org/stable/c/802e113cf120df7208e4c7e604950a85e87120a8	patch
https://git.kernel.org/stable/c/22dc0d042f02ce82aa61422ea5f232628bfd9e9c	patch
https://git.kernel.org/stable/c/6c25bf4e44a2b6a14332f952bba0974521f5b72d	patch
https://git.kernel.org/stable/c/bc3dd82a0ffd488bb902f4c69c3d28fd4088d973	patch
https://git.kernel.org/stable/c/059ac6252a63edf1cea79bf30bd860a8c264b62c	patch
https://git.kernel.org/stable/c/a2b8d7827f48ee54a686cb80e4a1d0ff954ec42a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.