CVE-2026-23375

A flaw was found in the Linux kernel's Transparent Huge Pages (THP) mechanism. This vulnerability occurs because the file_thp_enabled() function incorrectly allows THP for files on anonymous inodes, which are not designed for this feature. An attacker could potentially exploit this by manipulating specific memory operations, leading to a kernel crash when handling secret memory pages. Additionally, it can cause incorrect memory failure reports for guest memory files.

This flaw affects systems using THP with guest_memfd (KVM) or secretmem. Anonymous inodes incorrectly pass THP eligibility checks, causing khugepaged to create large folios that these subsystems don't support. For secretmem, collapse_file() accesses pages removed from direct map, causing crashes. Requires CONFIG_READ_ONLY_THP_FOR_FS and use of affected pseudo-filesystems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.