ShellCodeX
Tools • Events • News • Insights
SEO Checker
ShellCodeX vulnerability brief
UNASSESSED Received

CVE-2026-74379

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the probe silently continues, ultimately returning success, but with the corresponding range resource NULL'ed out. dev_dax_kmem_remove() iterates over all dax_device ranges regardless of if the underlying resource exists. When remove_memory() is called later, it returns 0 because the memory was never added which causes dev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can be removed and attempts cleanup on a NULL pointer. Fix this by skipping these ranges altogether, noting that these cases are considered success, such that the cleanup is still reached when all actually-added ranges are successfully removed.

Published 15 Aug 2026, 06:22 UTC Last modified 15 Aug 2026, 06:22 UTC
01

Attack profile

The conditions required to exploit this vulnerability and its potential impact.

Attack vector Not assessed
Attack complexity Not assessed
Privileges required Not assessed
User interaction Not assessed
Scope Not assessed
Confidentiality Not assessed
Integrity Not assessed
Availability Not assessed
02

Affected products

Product applicability statements supplied with the NVD record.

NVD has not published structured affected-product data for this record.
03

Weakness classification

CWE categories help security teams group the underlying software weakness.

Weakness classification is still awaiting analysis.
04

Source references

External advisories, patches and technical reports attached to this CVE record.