Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46284

mm/hugetlb: fix early boot crash on parameters without '=' separator

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to hugetlb_add_param(), which dereferences it in strlen() and can crash the system during early boot. Reject NULL values in hugetlb_add_param() and return -EINVAL instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to < 2774bcf714739cc6bb86f8812167bb9fbda70f6aaffected
  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to < 357c6d084b6137ae640209c5bfd01180f985c015affected
  • 5b47c02967ab770aa7661c8863a21b2fd59e35ff to < c45b354911d01565156e38d7f6bc07edb51fc34caffected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.18.27 to ≤ 6.18.*unaffected
  • 7.0.4 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References