CVE-2026-93172mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug We miss a failed allocation check for pgdat->per_cpu_nodestats, which results in a NULL deref when we offset into the per-cpu area. Propagate -ENOMEM up the stack and leave per_cpu_nodestats pointing at boot_nodestats so a later online can retry the allocation. hotadd_init_pgdat() returns NULL on failure, which __try_online_node() already maps to -ENOMEM. On failure nothing needs to be unwound: - the node is never marked online - per_cpu_nodestats is left pointing at boot_nodestats - __add_memory_resource() cleans up pending memblock resources - later online attempts retry the per_cpu_nodestats allocation
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 75ef7184053989118d3814c558a9af62e7376a58 builds before 4cc5caef9a8d1894dfa31d84a0daa0ac1437dadc; from 75ef7184053989118d3814c558a9af62e7376a58 before bc3b5e6519b8df22d622a03eab6772784da97db4; from 75ef7184053989118d3814c558a9af62e7376a58 before 1017fe1c7f48e511c5a680e3057005daaff2f3a2; 75ef7184053989118d3814c558a9af62e7376a58 builds before 2ebce860bdd7ae5e13002811bc9bbbf33fcfc221 | CNA record |
References
- https://git.kernel.org/stable/c/4cc5caef9a8d1894dfa31d84a0daa0ac1437dadc
- https://git.kernel.org/stable/c/bc3b5e6519b8df22d622a03eab6772784da97db4
- https://git.kernel.org/stable/c/1017fe1c7f48e511c5a680e3057005daaff2f3a2
- https://git.kernel.org/stable/c/2ebce860bdd7ae5e13002811bc9bbbf33fcfc221
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.