CVE-2026-46277
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/06/2026
Last modified:
08/06/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/zone_device: do not touch device folio after calling ->folio_free()<br />
<br />
The contents of a device folio can immediately change after calling<br />
->folio_free(), as the folio may be reallocated by a driver with a<br />
different order. Instead of touching the folio again to extract the<br />
pgmap, use the local stack variable when calling percpu_ref_put_many().



