Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. (CVE-2026-49428)

This vulnerability arises from improper handling of largepage objects in specific system calls like open(2) with the O_TRUNC flag and fspacectl(2). The system calls incorrectly free memory associated with largepage objects without verifying that such operations are permitted. This flaw allows an unprivileged local user to access freed kernel memory, which can be exploited to escalate privileges on the affected system.

An unprivileged local user can exploit this vulnerability to access freed kernel memory, potentially leading to privilege escalation. This compromises system security by allowing unauthorized access to kernel memory and elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.