Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43286

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to subpool Commit a833a693a490 ("mm: hugetlb: fix incorrect fallback for subpool") fixed an underflow error for hstate->resv_huge_pages caused by incorrectly attributing globally requested pages to the subpool's reservation. Unfortunately, this fix also introduced the opposite problem, which would leave spool->used_hpages elevated if the globally requested pages could not be acqu
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:25b27960b8629289436ec343190bb13be84e87d2fb983e92dc7af42f432ebad2
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/hugetlb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5eac1322a7b14b8cd05ec896618278b90fba7f39","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333718b6b1","versionType":"git"},{"lessThan":"f055897c975d079a90af873c791ab58cf0f6f2a5","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333718b6b1","versionType":"git"},{"lessThan":"1d3f9bb4c8af70304d19c22e30f5d16a2d589bb5","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["mm/hugetlb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.15"},{"lessThan":"6.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["mm/hugetlb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5eac1322a7b14b8cd05ec896618278b90fba7f39","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333718b6b1","versionType":"git"},{"lessThan":"f055897c975d079a90af873c791ab58cf0f6f2a5","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333718b6b1","versionType":"git"},{"lessThan":"1d3f9bb4c8af70304d19c22e30f5d16a2d589bb5","status":"affected","version":"a833a693a490ecff8ba377654c6d4d333…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["mm/hugetlb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.15"},{"lessThan":"6.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/1d3f9bb4c8af70304d19c22e30f5d16a2d589bb5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/5eac1322a7b14b8cd05ec896618278b90fba7f39"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f055897c975d079a90af873c791ab58cf0f6f2a5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc025f1b39f3284f3697afca0341f8e63350cd37d714bf003ca5de3607ca297a · sha256:e3eb45622667e063… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer