CVE-2026-98729

CVE-2026-98729

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

get_align_mask() returns huge_page_mask_align() for hugetlbfs, but get_align_bits()

adds va_align.bits regardless, so vm_unmapped_area() returns an address off the huge

page boundary and __unmap_hugepage_range() hits BUG_ON(start & ~huge_page_mask(h)) at

teardown.

This can be triggered on Carrizo and FX-8370E, both hstates.

Pass the file to get_align_bits() and skip the randomisation for hugetlbfs.

[ bp: Massage commit message. ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Published
2026-10-18T20:17Z
References (3)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:47Z
    x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
    cvelistv5
  • 18 OCT 15:47Z
    x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
    cvelistv5