CVE-2026-68086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mm/khugepaged component where data loss can occur during the collapsing of Transparent Huge Pages (THPs). The problem arises because collapse file() can coexist with dirty folios from previous writers. In a specific sequence where a file is opened for writing, closed, collapsed via madvise() with MADV COLLAPSE, and then reopened for writing, the system may trigger truncate inode pages(). This process clears out THPs but also discards dirty folios, leading to data loss. The issue is addressed by ensuring the page cache is fully written back and waited upon when collapsing file THPs, while holding the invalidate lock to prevent concurrent page cache truncation by do dentry open().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.