Riskcovery

CVE-2026-98506

mm/hugetlb: do not dissolve gigantic pages without runtime support

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to before ddc1055b557506a6ea8930dfbd8d1555d6a3f01eAffected
  • 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to before ccf96a4b8626a001c13c5836d8357f31c57bbd8eAffected
  • 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to before 443628f755b35bf45044f68b970b65cd531c42fdAffected
  • 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 to before a363c62a653cc8b3e21da9545fa4e028ef50f9c3Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.