CVE-2026-98373

A flaw was found in the Linux kernel's HugeTLB (huge memory page) subsystem. A local attacker can exploit this vulnerability to cause a Denial of Service (DoS) by triggering a system crash. The issue occurs during memory remapping operations when the kernel incorrectly calculates destination addresses while skipping unmapped page tables, leading to memory management errors and a kernel panic.

A logic error in move_hugetlb_page_tables can advance the destination address by a different offset than the source address when mremap skips an absent source page table entry or handles huge_pmd_unshare. If the source and destination offsets within their page tables differ, later page table operations can use an incorrect destination address. A reproducer reported a kernel panic on x86-64, resulting in local denial of service. For the CVSS the PR:L rating reflects that a local process must create and manipulate suitable hugetlb mappings through mremap. Reliable triggering also requires a specific hugepage mapping layout and page table state, so AC:H is appropriate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.