CVE-2026-93232

A flaw was found in the Linux kernel's HugeTLB (huge page memory management) subsystem. During system startup, an uninitialized memory dereference occurs when HugeTLB Vmemmap Optimization (HVO) is enabled on a kernel compiled with virtual memory debugging options. A local user able to configure or restart the system with these parameters can trigger this flaw, leading to a Denial of Service (DoS) via a kernel panic that prevents the operating system from booting.

This vulnerability is rated as Low impact because it strictly requires non-default kernel build configurations and privileged access to trigger. Standard production kernels in Red Hat Enterprise Linux are built without virtual memory debugging options (CONFIG_DEBUG_VM) enabled, rendering them unaffected by this issue. Furthermore, exploiting this flaw requires an attacker to modify boot parameters to enable early HugeTLB memory optimizations and force a system restart, constraining any potential impact to local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.