CVE-2026-43286

A flaw was found in the Linux kernel's HugeTLB (Huge Translation Lookaside Buffer) subsystem. When an allocation for huge memory pages requests both global and subpool memory, failing to acquire the global pages leaves the subpool's usage counter improperly elevated. A local user can exploit this flaw by repeatedly triggering failed allocations, eventually exhausting the subpool's allocation limit and causing a Denial of Service (DoS) for subsequent requests.

This vulnerability is evaluated as having Moderate impact because it is restricted to local authenticated users, requires non-default hugetlbfs subpool configurations, and causes a denial of service restricted to hugepage allocations without impacting memory confidentiality or system integrity. Supported Red Hat Enterprise Linux releases are not affected by this flaw because they do not contain the upstream commit that introduced the reservation accounting defect.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.