CVE-2026-93172

A flaw was found in the Linux kernel's memory management (mm/mm_init). A missing allocation check for pgdat->per_cpu_nodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Low impact because triggering the flaw requires dynamic memory hotplugging in conjunction with extreme memory exhaustion, which is not accessible to unprivileged users. In typical Red Hat Enterprise Linux environments, adding NUMA memory nodes requires administrative privileges or specific hypervisor-level actions. Because an unprivileged attacker cannot arbitrarily initiate node hot-addition or reliably force per-CPU allocation failures, the risk of a denial of service under normal operational conditions remains minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.