CVE-2026-98506

Source
https://cve.org/CVERecord?id=CVE-2026-98506
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98506.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98506
Downstream
Published
2026-10-18T15:17:12Z
Modified
2026-10-20T02:30:48Z
Summary
mm/hugetlb: do not dissolve gigantic pages without runtime support
Details

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98506.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34
Fixed
ddc1055b557506a6ea8930dfbd8d1555d6a3f01e
Fixed
ccf96a4b8626a001c13c5836d8357f31c57bbd8e
Fixed
443628f755b35bf45044f68b970b65cd531c42fd
Fixed
a363c62a653cc8b3e21da9545fa4e028ef50f9c3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98506.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98506.json"