CYBER CODE RED

Get real-time updates on Telegram

P5

CVE-2026-89966: Linux 6.19

CVE-2026-89966. EPSS 0.00198 (percentile 0.08868), scored 17-Oct-2026.

Affected technology

Linux · eb02f14c4a2bf4c242d91c4a5d7fb57c3c0ad1b1 to before 10f616ef06c5bd2d656a0eebaf73f9b09d150c24, eb02f14c4a2bf4c242d91c4a5d7fb57c3c0ad1b1 to before 7b8a8ae4dd176a232e973017d2aa3c536a7275e2
Linux

Linux · 6.19
Linux

Component: Not specified by the source
File: mm/hugetlb_cma.c

What an attacker can do

An unprivileged user can crash the kernel (trigger a panic) by requesting a gigantic hugepage allocation with MPOL_PREFERRED_MANY on a system where CMA is only configured on a subset of NUMA nodes.

Published

CCR priority
0.0 /100 (P5)
EPSS
0.00198 · percentile 0.08868 · 2026-10-17
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-89966.html