Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64302

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages Commit bf9e4e30f353 ("x86/mm: use pagetable_free()"), switched from freeing non-boot page tables through __free_pages() to pagetable_free(). However, the function is also called to free vmemmap pages. Given that vmemmap pages are not page tables, already the page_ptdesc(page) is wrong. But worse, pagetable_free() calls: __free_pages(page, compound_order(page)); Since vmemmap
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ca75e7946b53ee3098040ae6ceabb930afe849694de8752cc25ab97e78134f84
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/x86/mm/init_64.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"add1e4112e00b619614784bf630aeebfdefa23e1","status":"affected","version":"a1593c90896babf33e947910c7aecb9f50bab993","versionType":"git"},{"lessThan":"03f6ecbc446c33b38fd452cd3c494092a8116967","status":"affected","version":"bf9e4e30f3538391745a99bc2268ec4f5e4a401e","versionType":"git"},{"lessThan":"39406c05f8f150f1685839acd38ffdd69ff92031","status":"affected","version":"bf9e4e30f3538391745a99bc…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["arch/x86/mm/init_64.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/x86/mm/init_64.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"add1e4112e00b619614784bf630aeebfdefa23e1","status":"affected","version":"a1593c90896babf33e947910c7aecb9f50bab993","versionType":"git"},{"lessThan":"03f6ecbc446c33b38fd452cd3c494092a8116967","status":"affected","version":"bf9e4e30f3538391745a99bc2268ec4f5e4a401e","versionType":"git"},{"lessThan":"39406c05f8f150f1685839acd38ffdd69ff92031","status":"affected","version":"bf9e4e30f3538391745a99bc…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["arch/x86/mm/init_64.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/03f6ecbc446c33b38fd452cd3c494092a8116967"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/39406c05f8f150f1685839acd38ffdd69ff92031"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/add1e4112e00b619614784bf630aeebfdefa23e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:808524e971a5f88d9f160e8e14013cf8c51cb347d94f5d30f98b7b55635a4c2c · sha256:26e3a617a4ce4307… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer