High severity7.8NVD Advisory· Published Jun 8, 2026· Updated Jun 14, 2026
CVE-2026-46277
CVE-2026-46277
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/zone_device: do not touch device folio after calling ->folio_free()
The contents of a device folio can immediately change after calling ->folio_free(), as the folio may be reallocated by a driver with a different order. Instead of touching the folio again to extract the pgmap, use the local stack variable when calling percpu_ref_put_many().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 6.19.0, < 7.0.4+ 1 more
- (no CPE)range: >= 6.19.0, < 7.0.4
- (no CPE)range: < 7.0.12-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.