Riskcovery

CVE-2026-98729

x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

get_align_mask() returns huge_page_mask_align() for hugetlbfs, but get_align_bits() adds va_align.bits regardless, so vm_unmapped_area() returns an address off the huge page boundary and __unmap_hugepage_range() hits BUG_ON(start & ~huge_page_mask(h)) at teardown.

This can be triggered on Carrizo and FX-8370E, both hstates.

Pass the file to get_align_bits() and skip the randomisation for hugetlbfs.

[ bp: Massage commit message. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1317a5e7f7b1336eac4097f0ef4f5cd7ae72f1d0 to before fe23680e6f1d52b8cc45d77bf7c54249508a81c7Affected
  • 1317a5e7f7b1336eac4097f0ef4f5cd7ae72f1d0 to before b46b2e2de47ca9449532b0a7110ed99f79061d6eAffected
  • 1317a5e7f7b1336eac4097f0ef4f5cd7ae72f1d0 to before d2457a7e2727dc747a61a50d65c2f259afce8c45Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.