CVE-2026-98506mm/hugetlb: do not dissolve gigantic pages without runtime support
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve gigantic pages without runtime support dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ddc1055b557506a6ea8930dfbd8d1555d6a3f01e; from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ccf96a4b8626a001c13c5836d8357f31c57bbd8e; from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before 443628f755b35bf45044f68b970b65cd531c42fd; from 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before a363c62a653cc8b3e21da9545fa4e028ef50f9c3 | CNA record |
References
- https://git.kernel.org/stable/c/ddc1055b557506a6ea8930dfbd8d1555d6a3f01e
- https://git.kernel.org/stable/c/ccf96a4b8626a001c13c5836d8357f31c57bbd8e
- https://git.kernel.org/stable/c/443628f755b35bf45044f68b970b65cd531c42fd
- https://git.kernel.org/stable/c/a363c62a653cc8b3e21da9545fa4e028ef50f9c3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.