CVE-2026-93227

A flaw was found in the Linux kernel. This vulnerability allows a local user with control over boot parameters, or systems with specific memory alignments, to cause a Denial of Service (DoS) through a kernel panic. During early system boot with deferred memory initialization enabled, improper boundary calculation allows an internal memory tracking pointer to exceed available physical memory boundaries. When the kernel subsequently accesses this invalid pointer to initialize memory, it crashes, preventing the operating system from booting.

This vulnerability is rated as having a Low impact by Red Hat because triggering the boot-time crash requires privileged access to supply custom kernel boot options or an unusual physical memory layout paired with large Contiguous Memory Allocator reservations. The failure condition is confined entirely to the early system startup phase and cannot be triggered during normal multi-user runtime operations. Additionally, the vulnerable code was introduced in newer upstream kernels and is not present in supported Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.