CVE Database›CVE-2026-31397

CVE-2026-31397

kernel: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 3, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's memory management subsystem, specifically within the move_pages_huge_pmd() function. A local user could exploit a NULL pointer dereference when handling huge zero pages, which can lead to a system crash and a Denial of Service (DoS). Furthermore, improper reconstruction of Page Middle Directory (PMD) entries can cause memory corruption by incorrectly treating special memory mappings as normal pages, potentially leading to system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference