CVE-2026-31397
kernel: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 3, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's memory management subsystem, specifically within the move_pages_huge_pmd() function. A local user could exploit a NULL pointer dereference when handling huge zero pages, which can lead to a system crash and a Denial of Service (DoS). Furthermore, improper reconstruction of Page Middle Directory (PMD) entries can cause memory corruption by incorrectly treating special memory mappings as normal pages, potentially leading to system instability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference