CVE-2026-74379

A flaw was found in the Linux kernel's dax/kmem module. This vulnerability occurs when the system attempts to remove a memory resource that was not fully initialized, leading to an attempt to access a null pointer. A local attacker could potentially trigger this condition, causing the system to crash and resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity because exploitation requires specific persistent memory or DAX devices configured as system RAM and is only triggered during device teardown following a partial probe failure. Typical Red Hat Enterprise Linux installations do not employ DAX-backed memory management by default. Furthermore, initiating the device removal path requires local administrative privileges to unbind or reconfigure memory resources, limiting the blast radius to a localized denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.