---
id: CVE-2026-98506
title: 'mm/hugetlb: do not dissolve gigantic pages without runtime support'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/hugetlb: do not dissolve gigantic pages without runtime support

  dissolve_free_hugetlb_folio() doesn't check
  hstate_is_gigantic_no_runtime(h) though remove_hugetlb_f…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 <
    ddc1055b557506a6ea8930dfbd8d1555d6a3f01e
  - >-
    Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 <
    ccf96a4b8626a001c13c5836d8357f31c57bbd8e
  - >-
    Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 <
    443628f755b35bf45044f68b970b65cd531c42fd
  - >-
    Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 <
    a363c62a653cc8b3e21da9545fa4e028ef50f9c3
  - Linux 5.13
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:17:12.898Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98506'
references:
  - url: 'https://git.kernel.org/stable/c/ddc1055b557506a6ea8930dfbd8d1555d6a3f01e'
  - url: 'https://git.kernel.org/stable/c/ccf96a4b8626a001c13c5836d8357f31c57bbd8e'
  - url: 'https://git.kernel.org/stable/c/443628f755b35bf45044f68b970b65cd531c42fd'
  - url: 'https://git.kernel.org/stable/c/a363c62a653cc8b3e21da9545fa4e028ef50f9c3'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.287Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: do not dissolve gigantic pages without runtime support

dissolve_free_hugetlb_folio() doesn't check
hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/
update_and_free_hugetlb_folio() silently bail for such folios, so it frees
a still-listed folio and, on vmemmap restore failure, the
add_hugetlb_folio() rollback corrupts the free list.

## Affected

- `Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 < ddc1055b557506a6ea8930dfbd8d1555d6a3f01e`
- `Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 < ccf96a4b8626a001c13c5836d8357f31c57bbd8e`
- `Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 < 443628f755b35bf45044f68b970b65cd531c42fd`
- `Linux >= 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 < a363c62a653cc8b3e21da9545fa4e028ef50f9c3`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.