CVE-2026-45880

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-27 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails When vm_insert_page() fails in p2pmem_alloc_mmap(), p2pmem_alloc_mmap() doesn't invoke percpu_ref_put() to free the per-CPU ref of pgmap acquired after gen_pool_alloc_owner(), and memunmap_pages() will hang forever when trying to remove the PCI device. Fix it by adding the missed percpu_ref_put().

Affected Software (7)

VendorProductVersion
Linux Linux 7e9c7ef83d785236f5a8c3761dd053fae9b92fb8 < baa42b756d183a59572f3890981a3d32b8d05d40
Linux Linux 7e9c7ef83d785236f5a8c3761dd053fae9b92fb8 < 51b7181cfbedf289ce794b6d97a1c596c309ec38
Linux Linux 7e9c7ef83d785236f5a8c3761dd053fae9b92fb8 < e19cce88ec4c4877f4ff2469099b9cf23cc3e93e
Linux Linux 7e9c7ef83d785236f5a8c3761dd053fae9b92fb8 < a1f4dc72efc3204db95d052058d785cad7ce755f
Linux Linux 7e9c7ef83d785236f5a8c3761dd053fae9b92fb8 < 6220694c52a5a04102b48109e4f24e958b559bd3
Linux Linux 6.2
linux linux_kernel 6.2 – 6.6.128

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001600
Percentile 5.2%
Date 2026-11-10

EPSS Trend

2026-11-10
0.00160
2026-11-09
0.00160
2026-11-08
0.00160
2026-11-07
0.00160
2026-11-06
0.00160

Intelligence Sources

mitre ref →
nvd ref →