---
id: CVE-2026-93230
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

  Gigantic bootmem HugeTLB pages are currently initialized from
  hugetlb_init(), but page_alloc_init…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

  Gigantic bootmem HugeTLB pages are currently initialized from
  hugetlb_init(), but page_alloc_init…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40 <
    09505232eced5f1c42902d8f28740f070c3fc6dc
  - >-
    Linux >= fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40 <
    29968bc7aefb3cf1e72aa7c5f52697a6b0527094
  - >-
    Linux >= fde1c4ecf91640e5a95ec36b71ec2e8ec379ce40 <
    b1b7c045e808c761b1cc8c19b3040fadedda3fef
  - Linux 6.7
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T16:17:18.517'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93230'
references:
  - url: 'https://git.kernel.org/stable/c/09505232eced5f1c42902d8f28740f070c3fc6dc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/29968bc7aefb3cf1e72aa7c5f52697a6b0527094'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b1b7c045e808c761b1cc8c19b3040fadedda3fef'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-24T15:45:56.661Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

Gigantic bootmem HugeTLB pages are currently initialized from
hugetlb_init(), but page_alloc_init_late() runs earlier and walks
pageblocks to determine zone contiguity.

If a bootmem HugeTLB region is marked noinit, set_zone_contiguous() can
observe still-uninitialized struct pages through
__pageblock_pfn_to_page().  This may not trigger an immediate failure, but
it can make set_zone_contiguous() compute the wrong zone contiguity state.
If extra poisoned-page checks are added in this path, such as
PF_POISONED_CHECK() in page_zone_id(), it can also trigger an early boot
panic.

Initialize gigantic bootmem HugeTLB struct pages from
page_alloc_init_late(), before zone contiguity is evaluated, so later page
allocator setup only sees valid struct page state.  This also makes the
initialization order more natural, as struct pages should be initialized
before later code inspects them.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.