[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-64302":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":22,"technologies":24,"references":26,"score":30,"epss_score":31,"epss_percentile":32,"is_kev":20,"cisa_kev_date_added":33,"cisa_kev_due_date":33,"cisa_ssvc":34,"attack_mappings":40,"exploits":47},369274,"CVE-2026-64302","EUVD-2026-49014","In the Linux kernel, the following vulnerability has been resolved:\n\nx86\u002Fmm: Fix freeing of PMD-sized vmemmap pages\n\nCommit bf9e4e30f353 (\"x86\u002Fmm: use pagetable_free()\"), switched from\nfreeing non-boot page tables through __free_pages() to\npagetable_free().\n\nHowever, the function is also called to free vmemmap pages.\n\nGiven that vmemmap pages are not page tables, already the page_ptdesc(page)\nis wrong. But worse, pagetable_free() calls:\n\n\t__free_pages(page, compound_order(page));\n\nSince vmemmap pages are not compound pages (see vmemmap_alloc_block())\n-- except for HVO, which doesn't apply here -- only first page of a\nPMD-sized vmemmap page is freed, leaking the other ones.\n\nFix it by properly decoupling pagetable and vmemmap freeing.\nfree_pagetable() no longer has to mess with SECTION_INFO, as only the\nvmemmap is marked like that in register_page_bootmem_memmap().\n\nThe indentation in remove_pmd_table() is messed up. Fix that while\ntouching it.\n\nBootmem info handling will soon be fixed up. For now, handle it\nsimilar to free_pagetable(), just avoiding the ifdef.\n\n[ dhansen: changelog munging. More imperative voice ]","2026-07-25T10:17:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[],[23],"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",[25],"Linux Linux Kernel",[27,28,29],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F03f6ecbc446c33b38fd452cd3c494092a8116967","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F39406c05f8f150f1685839acd38ffdd69ff92031","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fadd1e4112e00b619614784bf630aeebfdefa23e1",0.28,0.00158,0.04526,null,{"timestamp":33,"automatable":35,"tech_impact":36,"exploitation":37,"cisa_decision":38,"cisa_remediation_timeline":39},"no","partial","none",{},"FSU",[41],{"name":42,"source":43,"tactics":44,"technique_id":46},"Exploitation for Privilege Escalation","attack_vector",[45],"privilege-escalation","T1068",[]]