CVE-2026-46279

A flaw was found in the Linux kernel's memory management subsystem. Due to an initialization ordering issue, certain pages allocated before the page_ext structure is fully available may have uninitialized codetag references. This can lead to a warning being triggered when these pages are later reclaimed by the Kernel Address Sanitizer (KASAN), indicating an alloc_tag was not set. This issue is primarily observed in debug configurations and does not directly lead to arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.