The Linux kernel had a vulnerability in the memory hotplug code where the function remove_memory_blocks_and_altmaps() acquired a reference to memory block devices via find_memory_block() but failed to release it, causing a reference leak. This leak affected memory block device references and was addressed in a patch series titled "mm: Fix memory block leaks and locking" (version 2). The fix drops the acquired reference after retrieving and clearing the altmap before removing the memory block device, resolving two memory block device reference leaks and a locking issue related to the per-memory_block hwpoison counter.

The vulnerability results in leaked references to memory block devices during removal operations, which can cause resource exhaustion or instability in the kernel memory hotplug subsystem over time. There is no indication of direct exploitation or privilege escalation from this leak. No known exploits in the wild have been reported.

A patch series fixing this issue has been released. Users and maintainers should apply the official kernel patches that address memory block device reference leaks and locking issues in the memory hotplug code. Patch status is not explicitly confirmed in the provided data, so check the vendor or kernel mailing list advisories for the latest remediation guidance.