CVE-2026-93230
kernel: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel. This issue may allow a local user to cause a Denial of Service (DoS) due to an improper initialization sequence in the HugeTLB (Huge Translation Lookaside Buffer) memory subsystem. During system startup, gigantic huge page memory structures can be inspected before they are fully initialized. This condition can lead to an incorrect memory state or an early boot kernel crash, preventing the system from operating normally.
Statement
This flaw is rated as having a Low impact by Red Hat because it only manifests during early kernel bootstrap when gigantic huge pages are explicitly reserved at boot time. Standard installations do not configure bootmem gigantic pages by default, substantially restricting exposure to specialized environments. Additionally, an unprivileged local user cannot trigger or exploit this condition at runtime once the operating system has completed booting.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-908 · Use of Uninitialized Resource