CVE Database›Document archive›CVE-2026-93230

CVE-2026-93230

kernel: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 24, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel. This issue may allow a local user to cause a Denial of Service (DoS) due to an improper initialization sequence in the HugeTLB (Huge Translation Lookaside Buffer) memory subsystem. During system startup, gigantic huge page memory structures can be inspected before they are fully initialized. This condition can lead to an incorrect memory state or an early boot kernel crash, preventing the system from operating normally.

Statement

This flaw is rated as having a Low impact by Red Hat because it only manifests during early kernel bootstrap when gigantic huge pages are explicitly reserved at boot time. Standard installations do not configure bootmem gigantic pages by default, substantially restricting exposure to specialized environments. Additionally, an unprivileged local user cannot trigger or exploit this condition at runtime once the operating system has completed booting.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-908 · Use of Uninitialized Resource