Memory Management Vulnerability in Linux Kernel Affecting Page Allocation

CVE-2026-80718

What is CVE-2026-80718?

A vulnerability in the Linux kernel's memory management involving incorrect bitmap overflow and accounting during the allocation of contiguous memory pages has been identified. This issue arises in the pcpu_create_chunk() function, where the number of pages allocated is incorrectly handled, which can lead to overwriting beyond allocated bitmap size. The oversight not only affects the chunk's populated bitmap but also disrupts the global accounting of empty pages. Addressing this vulnerability ensures proper memory handling and enhances system stability.

References