In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check
hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/
update_and_free_hugetlb_folio() silently bail for such folios, so it frees
a still-listed folio and, on vmemmap restore failure, the
add_hugetlb_folio() rollback corrupts the free list.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 affected < ddc1055b557506a6ea8930dfbd8d1555d6a3f01e
6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 affected < ccf96a4b8626a001c13c5836d8357f31c57bbd8e
6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 affected < 443628f755b35bf45044f68b970b65cd531c42fd
6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 affected < a363c62a653cc8b3e21da9545fa4e028ef50f9c3
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
6.12.112 unaffected ≤ 6.12.*
6.18.55 unaffected ≤ 6.18.*
7.2.9 unaffected ≤ 7.2.*
7.3-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/443628f755b35bf45044f68b970b65cd531c42fd cve-icon cve-icon
https://git.kernel.org/stable/c/a363c62a653cc8b3e21da9545fa4e028ef50f9c3 cve-icon cve-icon
https://git.kernel.org/stable/c/ccf96a4b8626a001c13c5836d8357f31c57bbd8e cve-icon cve-icon
https://git.kernel.org/stable/c/ddc1055b557506a6ea8930dfbd8d1555d6a3f01e cve-icon cve-icon
History

Sun, 18 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-754

Sun, 18 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve gigantic pages without runtime support dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.
Title mm/hugetlb: do not dissolve gigantic pages without runtime support
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:17:12.898Z

Reserved: 2026-09-25T10:25:14.353Z

Link: CVE-2026-98506

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:01.717

Modified: 2026-10-18T16:17:01.717

Link: CVE-2026-98506

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T17:00:09Z

Weaknesses