CVE-2026-93230

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93230", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-17T16:02:15.094Z", "datePublished": "2026-09-24T15:29:16.067Z", "dateUpdated": "2026-10-21T12:52:25.122Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:52:25.122Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier\n\nGigantic bootmem HugeTLB pages are currently initialized from\nhugetlb_init(), but page_alloc_init_late() runs earlier and walks\npageblocks to determine zone contiguity.\n\nIf a bootmem HugeTLB region is marked noinit, set_zone_contiguous() can\nobserve still-uninitialized struct pages through\n__pageblock_pfn_to_page(). This may not trigger an immediate failure, but\nit can make set_zone_contiguous() compute the wrong zone contiguity state.\nIf extra poisoned-page checks are added in this path, such as\nPF_POISONED_CHECK() in page_zone_id(), it can also trigger an early boot\npanic.\n\nInitialize gigantic bootmem HugeTLB struct pages from\npage_alloc_init_late(), before zone contiguity is evaluated, so later page\nallocator setup only sees valid struct page state. This also makes the\ninitialization order more natural, as struct pages should be initialized\nbefore later code inspects them."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/linux/hugetlb.h", "mm/hugetlb.c", "mm/mm_init.c", "mm/sparse-vmemmap.c"], "versions": [{"version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "lessThan": "326de479ab5942fb4a4aa4f20c716045434fcd6b", "status": "affected", "versionType": "git"}, {"version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "lessThan": "09505232eced5f1c42902d8f28740f070c3fc6dc", "status": "affected", "versionType": "git"}, {"version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "lessThan": "29968bc7aefb3cf1e72aa7c5f52697a6b0527094", "status": "affected", "versionType": "git"}, {"version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "lessThan": "b1b7c045e808c761b1cc8c19b3040fadedda3fef", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/linux/hugetlb.h", "mm/hugetlb.c", "mm/mm_init.c", "mm/sparse-vmemmap.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.51", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.51"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/326de479ab5942fb4a4aa4f20c716045434fcd6b"}, {"url": "https://git.kernel.org/stable/c/09505232eced5f1c42902d8f28740f070c3fc6dc"}, {"url": "https://git.kernel.org/stable/c/29968bc7aefb3cf1e72aa7c5f52697a6b0527094"}, {"url": "https://git.kernel.org/stable/c/b1b7c045e808c761b1cc8c19b3040fadedda3fef"}], "title": "mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["include/linux/hugetlb.h", "mm/hugetlb.c", "mm/mm_init.c", "mm/sparse-vmemmap.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "326de479ab5942fb4a4aa4f20c716045434fcd6b", "status": "affected", "version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "versionType": "git"}, {"lessThan": "09505232eced5f1c42902d8f28740f070c3fc6dc", "status": "affected", "version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "versionType": "git"}, {"lessThan": "29968bc7aefb3cf1e72aa7c5f52697a6b0527094", "status": "affected", "version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "versionType": "git"}, {"lessThan": "b1b7c045e808c761b1cc8c19b3040fadedda3fef", "status": "affected", "version": "fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["include/linux/hugetlb.h", "mm/hugetlb.c", "mm/mm_init.c", "mm/sparse-vmemmap.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.51", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier\n\nGigantic bootmem HugeTLB pages are currently initialized from\nhugetlb_init(), but page_alloc_init_late() runs earlier and walks\npageblocks to determine zone contiguity.\n\nIf a bootmem HugeTLB region is marked noinit, set_zone_contiguous() can\nobserve still-uninitialized struct pages through\n__pageblock_pfn_to_page(). This may not trigger an immediate failure, but\nit can make set_zone_contiguous() compute the wrong zone contiguity state.\nIf extra poisoned-page checks are added in this path, such as\nPF_POISONED_CHECK() in page_zone_id(), it can also trigger an early boot\npanic.\n\nInitialize gigantic bootmem HugeTLB struct pages from\npage_alloc_init_late(), before zone contiguity is evaluated, so later page\nallocator setup only sees valid struct page state. This also makes the\ninitialization order more natural, as struct pages should be initialized\nbefore later code inspects them."}], "id": "CVE-2026-93230", "lastModified": "2026-10-21T13:21:05.430", "metrics": {}, "published": "2026-09-24T16:17:18.517", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/09505232eced5f1c42902d8f28740f070c3fc6dc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/29968bc7aefb3cf1e72aa7c5f52697a6b0527094"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/326de479ab5942fb4a4aa4f20c716045434fcd6b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b1b7c045e808c761b1cc8c19b3040fadedda3fef"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40,09505232eced5f1c42902d8f28740f070c3fc6dc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40,29968bc7aefb3cf1e72aa7c5f52697a6b0527094)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40,b1b7c045e808c761b1cc8c19b3040fadedda3fef)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.51,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.4,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T02:45:06.569266+00:00", "updated": "2026-09-25T12:00:15.931534+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-665"]}