CVE Database›Document archive›CVE-2026-68163

CVE-2026-68163

kernel: mm/page_vma_mapped: fix device-private PMD handling

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 10, 2026

Updated · August 31, 2026

Description

A flaw was found in the Linux kernel's memory management subsystem. Incorrect handling of device-private Page Middle Directory (PMD) entries can lead to memory corruption. Specifically, when page_vma_mapped_walk() encounters these entries, it can misinterpret them as migration entries, resulting in memory corruption. Additionally, a race condition can occur during PMD splitting, further contributing to memory integrity issues.

Statement

This issue affects device-private memory mappings with PMD-sized entries. page_vma_mapped does not handle device-private PMDs correctly in rmap walks. Requires device-private memory configurations.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')