CVE-2026-45880
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails When vm_insert_page() fails in p2pmem_alloc_mmap(), p2pmem_alloc_mmap() doesn't invoke percpu_ref_put() to free the per-CPU ref of pgmap acquired after gen_pool_alloc_owner(), and memunmap_pages() will hang forever when trying to remove the PCI device. Fix it by adding the missed percpu_ref_put().
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMay 27, 2026
First seenMay 27, 2026
How to fix
Update
- linux linux_kernel6.6.128, 6.12.75, 6.18.14, 6.19.4 or later
Patches
- git.kernel.org/stable/c/51b7181cfbedf289ce794b6d97a1c596c309ec38
- git.kernel.org/stable/c/6220694c52a5a04102b48109e4f24e958b559bd3
- git.kernel.org/stable/c/a1f4dc72efc3204db95d052058d785cad7ce755f
- git.kernel.org/stable/c/baa42b756d183a59572f3890981a3d32b8d05d40
- git.kernel.org/stable/c/e19cce88ec4c4877f4ff2469099b9cf23cc3e93e
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.2 ≤ v < 6.6.128, 6.7 ≤ v < 6.12.75, 6.13 ≤ v < 6.18.14, 6.19 ≤ v < 6.19.4 | 6.6.128, 6.12.75, 6.18.14, 6.19.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.