Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64416

In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host lookup_swap_cgroup_id() passes swap_cgroup_ctrl[type].map to __swap_cgroup_id_lookup() without checking that the type was ever registered via swap_cgroup_swapon(). On a swapless host every ctrl->map is NULL, so __swap_cgroup_id_lookup() dereferences NULL + a scaled swp_offset(). Since commit bea67dcc5eea ("mm: attempt to batch free swap entries for zap
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:46fdf3b2d443e1ea9a929eef6841baa111f3cbac476191a5b896538f54d3bae1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/swap_cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"818416fef38759f23210de449663cd9d7e293d39","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e644977cd07e6","versionType":"git"},{"lessThan":"b415c00bf23df577a4a95673d00ae76687bcc1d4","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e644977cd07e6","versionType":"git"},{"lessThan":"6a4196d19f477524d2f92adca90fc1fbe9a0420a","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e6…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["mm/swap_cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/swap_cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"818416fef38759f23210de449663cd9d7e293d39","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e644977cd07e6","versionType":"git"},{"lessThan":"b415c00bf23df577a4a95673d00ae76687bcc1d4","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e644977cd07e6","versionType":"git"},{"lessThan":"6a4196d19f477524d2f92adca90fc1fbe9a0420a","status":"affected","version":"bea67dcc5eea0f6a213897a59b9e6…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["mm/swap_cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/63b02a9409cb5180398491b093e48bcb5315f5fb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6a4196d19f477524d2f92adca90fc1fbe9a0420a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/818416fef38759f23210de449663cd9d7e293d39"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b415c00bf23df577a4a95673d00ae76687bcc1d4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:68457e526e31c8dc32e307b4537c166f151f9decd244731ae058d5beb923f909 · sha256:dfb03b551a1bc892… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer