In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve gigantic pages without runtime support… (CVE-2026-98506)

The vulnerability in the Linux kernel's mm/hugetlb subsystem arises because dissolve_free_hugetlb_folio() does not verify if a huge page is gigantic without runtime support (hstate_is_gigantic_no_runtime(h)). While other functions like remove_hugetlb_folio() and update_and_free_hugetlb_folio() silently bail out for such folios, dissolve_free_hugetlb_folio() proceeds to free a folio that is still listed. This can cause corruption of the free list if a vmemmap restore operation fails and triggers a rollback via add_hugetlb_folio(). The issue has been resolved in the Linux kernel.

Improper handling of gigantic huge pages without runtime support can lead to corruption of the kernel's free list memory structures. This corruption could potentially cause system instability or crashes. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this issue. Users should apply the official kernel updates that include this patch to remediate the vulnerability. No additional mitigations are specified.