Impact
The flaw in the Linux kernel occurs in the memory block registration routine where the alternative memory map pointer (mem->altmap) is assigned before the completion of __add_memory_block(). When the addition fails—such as under memory pressure—the device is unregistered, and a cleanup routine later accesses mem->altmap while it is still set, triggering a WARN_ON. This results in a kernel warning but no known denial‑of‑service or code‑execution scenario was documented.
Affected Systems
All Linux kernel builds that include the memory block registration code, especially those that use the virtio‑mem driver, are affected. No specific kernel versions are listed; any kernel that contains the vulnerable code path before the patch commit is potentially impacted.
Risk and Exploitability
The CVSS score is 5.5 and the EPSS score is less than 1%, indicating a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the flaw could lead to kernel instability when memory pressure causes __add_memory_block() to fail, but no concrete exploit or crash scenario is documented. Consequently, the overall risk is considered low.
OpenCVE Enrichment