A vulnerability in the Linux kernel's PCI/P2PDMA subsystem causes a resource release failure when vm_insert_page() fails during p2pmem_alloc_mmap(). (CVE-2026-45880)
A vulnerability in the Linux kernel's PCI/P2PDMA subsystem causes a resource release failure when vm_insert_page() fails during p2pmem_alloc_mmap(). This leads to a hang in memunmap_pages() when attempting to remove the PCI device. The issue is fixed by adding a missing percpu_ref_put() call to properly release the per-CPU reference of pgmap.
AI Analysis
Technical Summary
The Linux kernel contained a flaw in the PCI/P2PDMA code where, if vm_insert_page() failed inside p2pmem_alloc_mmap(), the function did not call percpu_ref_put() to release a per-CPU reference acquired earlier. This omission caused memunmap_pages() to hang indefinitely when removing the PCI device because the reference was never freed. The vulnerability was addressed by adding the missing percpu_ref_put() call, ensuring proper cleanup of the per-CPU pgmap reference on failure.
Potential Impact
This vulnerability does not affect confidentiality or integrity but causes a denial of service (system hang) due to memunmap_pages() hanging when the PCI device is removed. This can disrupt normal system operation and device management.
Mitigation Recommendations
A fix is available that adds the missing percpu_ref_put() call to properly release the per-CPU reference on failure. Users should apply the official Linux kernel patch that addresses this issue. Patch status is not explicitly provided here; check the vendor advisory or Linux kernel mailing lists for the official fix and apply it accordingly.
A vulnerability in the Linux kernel's PCI/P2PDMA subsystem causes a resource release failure when vm_insert_page() fails during p2pmem_alloc_mmap(). (CVE-2026-45880)
Description
A vulnerability in the Linux kernel's PCI/P2PDMA subsystem causes a resource release failure when vm_insert_page() fails during p2pmem_alloc_mmap(). This leads to a hang in memunmap_pages() when attempting to remove the PCI device. The issue is fixed by adding a missing percpu_ref_put() call to properly release the per-CPU reference of pgmap.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a flaw in the PCI/P2PDMA code where, if vm_insert_page() failed inside p2pmem_alloc_mmap(), the function did not call percpu_ref_put() to release a per-CPU reference acquired earlier. This omission caused memunmap_pages() to hang indefinitely when removing the PCI device because the reference was never freed. The vulnerability was addressed by adding the missing percpu_ref_put() call, ensuring proper cleanup of the per-CPU pgmap reference on failure.
Potential Impact
This vulnerability does not affect confidentiality or integrity but causes a denial of service (system hang) due to memunmap_pages() hanging when the PCI device is removed. This can disrupt normal system operation and device management.
Mitigation Recommendations
A fix is available that adds the missing percpu_ref_put() call to properly release the per-CPU reference on failure. Users should apply the official Linux kernel patch that addresses this issue. Patch status is not explicitly provided here; check the vendor advisory or Linux kernel mailing lists for the official fix and apply it accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-mvr8-9v2m-pg6f
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-45880"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a3ef7ef27e9c79719034b9d
Added to database: 06/26/2026, 22:06:39 UTC
Last enriched: 06/26/2026, 22:50:13 UTC
Last updated: 07/31/2026, 19:24:48 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.