The vulnerability arises when the kernel removes memory blocks and their alternate mappings during memory‑hotplug. The remove_memory_blocks_and_altmaps function acquires a reference to the memory block’s device but never relinquishes it, causing the device reference count to grow permanently. Over time this memory block device reference leak can exhaust kernel resources, destabilize the system, or produce a denial‑of‑service condition. The flaw is classified as CWE‑911, reflecting improper management of memory references.

All Linux kernel releases that expose the memory_hotplug interfaces and lack the patch series “mm: Fix memory block leaks and locking, v2.” are affected. This includes any distribution shipping such kernels and any system that supports dynamic memory hotplug; no user‑space components are impacted.

The CVSS score of 5.5 rates the issue as moderate severity. The EPSS score of less than 1% indicates that exploitation is unlikely, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require privileged kernel access; based on the description it is inferred that this is necessary because the vulnerable path runs kernel code that removes memory blocks, an operation normally reserved for privileged contexts. Because it is not network‑exposed, the attack surface is limited, but managed systems allowing memory hot‑plug remain at risk.