Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes file_thp_enabled() incorrectly allows THP for files on anonymous inodes (e.g. guest_memfd and secretmem). These files are created via alloc_file_pseudo(), which does not call get_write_access() and leaves inode->i_writecount at 0. Combined with S_ISREG(inode->i_mode) being true, they appear as read-only regular files when CONFIG_READ_ONLY_THP_FOR_FS is enabled, making them eligib
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:00ef7d35bf07f081b04743634656a3835705abe39bb4c953e2ba3c34a1da01eb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["mm/huge_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.17","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.7","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/huge_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"08de46a75f91a6661bc1ce0a93614f4bc313c581","status":"affected","version":"7fbb5e188248c50f737720825da1864ce42536d1","versionType":"git"},{"lessThan":"0524ee56af2c9bfbad152a810f1ca95de8ca00d7","status":"affected","version":"7fbb5e188248c50f737720825da1864ce42536d1","versionType":"git"},{"lessThan":"f6fa05f0dddd387417d0c28281ddb951582514d6","status":"affected","version":"7fbb5e188248c50f737720825da18…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["mm/huge_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.17","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.7","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/huge_memory.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"08de46a75f91a6661bc1ce0a93614f4bc313c581","status":"affected","version":"7fbb5e188248c50f737720825da1864ce42536d1","versionType":"git"},{"lessThan":"0524ee56af2c9bfbad152a810f1ca95de8ca00d7","status":"affected","version":"7fbb5e188248c50f737720825da1864ce42536d1","versionType":"git"},{"lessThan":"f6fa05f0dddd387417d0c28281ddb951582514d6","status":"affected","version":"7fbb5e188248c50f737720825da18…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/0524ee56af2c9bfbad152a810f1ca95de8ca00d7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/08de46a75f91a6661bc1ce0a93614f4bc313c581"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/dd085fe9a8ebfc5d10314c60452db38d2b75e609"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f6fa05f0dddd387417d0c28281ddb951582514d6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:42c1fa67e5c6d9dbb3bdf692fc86a2f0e1b7737dcc9d592f528ad2d11c53e579 · sha256:8a6cc47a893201f4… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer