SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63953

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A memory leak vulnerability exists in the Linux kernel's `migrate_vma_insert_huge_pmd_page()` function, where allocated page tables are not freed upon a PMD check failure. This can lead to increased memory consumption, potentially impacting system performance and stability. Linux system administrators and developers should prioritize this fix to mitigate the risk of resource exhaustion in affected environments.

CVE
CVE-2026-63953
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page When migrate_vma_insert_huge_pmd_page() jumps to unlock_abort due to a PMD check failure, the pgtable allocated earlier via pte_alloc_one() is never freed, causing a memory leak. Added free_abort label to release the pgtable in error path.