CVE-2026-99093
kernel: mm: don't schedule deferred kernel page table freeing while booting
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 26, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel. A privileged user capable of modifying boot parameters can cause a Denial of Service (DoS) by enabling early boot function tracing. Under this configuration, the kernel attempts to schedule deferred page table memory cleanup before necessary internal work services are initialized, triggering a null pointer dereference that crashes the system during startup.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference