CVE-2026-72175

A flaw was found in the Linux kernel. A race condition exists in the make_uffd_wp_huge_pte() function, which is responsible for managing large memory pages (HugeTLB Page Table Entries). This vulnerability occurs when the system attempts to update these memory entries, but a timing issue allows older, incorrect information to overwrite newer hardware updates. This can lead to an inconsistent memory state, potentially affecting system stability and the integrity of data stored in memory.

This vulnerability has been rated as Moderate because exploiting this race condition requires local code execution and specific write-protection memory scans on HugeTLB pages, restricting the potential blast radius to local data corruption or denial of service rather than immediate privilege escalation. The flaw is confined to modern kernel releases utilizing the pagemap scan interface, leaving older enterprise platforms such as Red Hat Enterprise Linux 8 and 9 unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.