CVE-2026-68172

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm64 architecture where the huge ptep get() function fails to properly handle unaligned virtual addresses pointing to the middle of a contpmd or contpte mapped hugetlb folio. This occurs during the pgtables rewalk in the find num contig() function. If the address is not aligned, the system may incorrectly return CONT PTES instead of CONT PMDS. On systems with a 16K page size, this can lead to the collection of excess A/D bit state, increasing kernel workload. More critically, it may cause the kernel to iterate beyond the PTE table and dereference an invalid ptep pointer. Because the ptep pointer is a linear map address, this could result in accessing unauthorized physical memory or dereferencing a virtual address not mapped in the kernel pgtables, leading to a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.