The vulnerability in the Linux kernel involves a reference leak in memory block handling within the drivers/base/memory code. Specifically, memblk_nr_poison_inc() and memblk_nr_poison_sub() acquire a reference to a memory block device using find_memory_block_by_id() but fail to release this reference after use, causing a leak. The fix involves dropping the reference after updating the nr_hwpoison value to prevent resource leakage.

The impact is a resource leak in the kernel memory block management subsystem, which could lead to increased memory consumption or resource exhaustion over time. There is no indication of direct exploitation or security compromise beyond the leak. No known exploits are reported in the wild.

A fix has been implemented to address this reference leak by properly releasing the memory block device reference after use. Since no patch links or vendor advisories are provided, users should monitor official Linux kernel updates for the inclusion of this fix and apply updates accordingly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.