CVE-2026-93227

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2

Description An issue exists in the memory management initialization where the deferred grow zone() function may cause an overflow of the pgdat->first deferred pfn variable. This occurs when CONFIG DEFERRED STRUCT PAGE INIT is enabled and a large Contiguous Memory Allocator (CMA) reservation is present. If the node's RAM end is not aligned on PAGES PER SECTION boundaries, the pgdat->first deferred pfn can point beyond the end of the node's memory. Consequently, the deferred init memmap() function may trigger a kernel panic due to an out-of-range page frame number (PFN).

Recommendations Update the Linux kernel to version 7.2 or later.