In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve free hugetlb folio() doesn't check hstate is gigantic no runtime(h) though remove hugetlb folio()/ update and free hugetlb folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add hugetlb folio() rollback corrupts the free list.