All vulnerabilities
CVE-2026-98506

Linux: mm/hugetlb: do not dissolve gigantic pages without runtime support

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in443628f755b35bf45044f68b970b65cd531c42fdFixed versionCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 443628f755b35bf45044f68b970b65cd531c42fdLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.

Text from CVE List

Affected versions 10

  • Linuxaffected: 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ddc1055b557506a6ea8930dfbd8d1555d6a3f01eCVE List
  • Linuxaffected: 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ccf96a4b8626a001c13c5836d8357f31c57bbd8eCVE List
  • Linuxaffected: 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before 443628f755b35bf45044f68b970b65cd531c42fdCVE List
  • Linuxaffected: 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before a363c62a653cc8b3e21da9545fa4e028ef50f9c3CVE List
  • Linuxaffected: 5.13CVE List
  • Linuxunaffected: all versions before 5.13CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4