CVE-2026-68163
kernel: mm/page_vma_mapped: fix device-private PMD handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's memory management subsystem. Incorrect handling of device-private Page Middle Directory (PMD) entries can lead to memory corruption. Specifically, when page_vma_mapped_walk() encounters these entries, it can misinterpret them as migration entries, resulting in memory corruption. Additionally, a race condition can occur during PMD splitting, further contributing to memory integrity issues.
Statement
This issue affects device-private memory mappings with PMD-sized entries. page_vma_mapped does not handle device-private PMDs correctly in rmap walks. Requires device-private memory configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')