CVE-2026-99127

A flaw was found in the Linux kernel's page pool memory allocator. This vulnerability allows an attacker to cause a Denial of Service (DoS) by triggering network traffic that requests odd-sized memory fragments. Because the allocator does not properly align fragment offsets for odd-sized requests on architectures without strict hardware alignment, subsequent network buffers allocated from the shared memory pool become misaligned. When the kernel performs atomic operations on these misaligned structures across CPU cache line boundaries, split lock detection triggers a kernel panic and crashes the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.