CVE-2026-74379

Source
https://cve.org/CVERecord?id=CVE-2026-74379
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74379.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74379
Downstream
Published
2026-08-15T05:58:57.024Z
Modified
2026-08-18T03:30:59.003403557Z
Summary
dax/kmem: account for partial discontiguous resource upon removal
Details

In the Linux kernel, the following vulnerability has been resolved:

dax/kmem: account for partial discontiguous resource upon removal

When devdaxkmemprobe() partially succeeds (at least one range is mapped) but a subsequent range fails requestmemregion() or addmemorydrivermanaged(), the probe silently continues, ultimately returning success, but with the corresponding range resource NULL'ed out.

devdaxkmemremove() iterates over all daxdevice ranges regardless of if the underlying resource exists. When removememory() is called later, it returns 0 because the memory was never added which causes devdaxkmemremove() to incorrectly assume the (nonexistent) resource can be removed and attempts cleanup on a NULL pointer.

Fix this by skipping these ranges altogether, noting that these cases are considered success, such that the cleanup is still reached when all actually-added ranges are successfully removed.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74379.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
60e93dc097f7f13a16a7e4b75b8803eb2adbb721
Fixed
ef4fc53898bd6c4d0119cc6d419ebef7f2560f31
Fixed
5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb
Fixed
d47b0b8a69a13e06afafa54723f3e8c99b0c788f
Fixed
799e54c510a03a65a57627018a817838d72f35bd
Fixed
598ed7393a639c7547b28ff3e14db9f1ac37c132
Fixed
30ea97affbcce236c57287c82dc6ef7a29c63b76
Fixed
8aa442cfce79e2d69e72fc8e0c0864ac2971149d

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74379.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74379.json"