CVE-2026-46277

kernel: mm/zone_device: do not touch device folio after calling ->folio_free()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 8, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's memory management, specifically within the mm/zone_device component. This vulnerability arises when a device folio is accessed after it has been freed and potentially reallocated by a driver. This can lead to memory corruption, which a local attacker could potentially leverage to cause a denial of service (DoS) or achieve other impacts.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference