CVE-2026-98506 PUBLISHED

mm/hugetlb: do not dissolve gigantic pages without runtime support

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to ddc1055b557506a6ea8930dfbd8d1555d6a3f01e (excl.)
  • affected from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to ccf96a4b8626a001c13c5836d8357f31c57bbd8e (excl.)
  • affected from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to 443628f755b35bf45044f68b970b65cd531c42fd (excl.)
  • affected from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to a363c62a653cc8b3e21da9545fa4e028ef50f9c3 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.13 is affected
  • unaffected from 0 to 5.13 (excl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References