Riskcovery

CVE-2026-46284

mm/hugetlb: fix early boot crash on parameters without '=' separator

State
Published
Severity
Not scored
Published
Jun 8, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: fix early boot crash on parameters without '=' separator

If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to hugetlb_add_param(), which dereferences it in strlen() and can crash the system during early boot.

Reject NULL values in hugetlb_add_param() and return -EINVAL instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to before 2774bcf714739cc6bb86f8812167bb9fbda70f6aAffected
  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to before 357c6d084b6137ae640209c5bfd01180f985c015Affected
  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to before c45b354911d01565156e38d7f6bc07edb51fc34cAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.