CVE-2026-68086

A flaw was found in the Linux kernel's memory management (mm/khugepaged) component. A local user could trigger an edge case where unsaved changes to file data (dirty folios) are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice (madvise) operations for transparent huge pages (THPs), leading to data loss.

This vulnerability is rated as Moderate impact because triggering it requires local access and an uncommon, tightly sequenced series of file modifications and memory collapse requests. In typical Red Hat Enterprise Linux environments, transparent huge page operations and writable file handles are mutually isolated, limiting the likelihood of unintentional data loss. Additionally, the flaw cannot be leveraged for privilege escalation or remote code execution, restricting the potential damage to the loss of unsaved file modifications accessible to the local user.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.