CVE-2026-90283
Description
In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure hugetlbfs_fill_super() allocates a hugepage subpool when size or min_size mount options are specified. hugepage_new_subpool() may also reserve huge pages for min_size. If root dentry creation fails after the subpool is created, the failure path frees the subpool with kfree(). This bypasses hugepage_put_subpool() and can leave min_size reservations charged. Use hugepage_put_subpool() on the failure path, matching the normal put_super path.
How to fix
- Linux Linuxf2d6cea221d777fab3ba18f805ba4c17c90e0b8b, 91c4f3a87862fd86594d5945512decbfa0b1d13d, 04f0354a4abf6793aa5b3f32e2b019ab206f344d, 5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b, 1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa, dfe848cadfde4179a0691da34f4bed36ff7185b5, dc2bd517ac0bce4ec7498644bd16b6db502df8e2, 308ab73e97c87bd0e142b11758faab7f88d82854 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < f2d6cea221d777fab3ba18f805ba4c17c90e0b8b, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < 91c4f3a87862fd86594d5945512decbfa0b1d13d, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < 04f0354a4abf6793aa5b3f32e2b019ab206f344d, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < 5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < 1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < dfe848cadfde4179a0691da34f4bed36ff7185b5, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < dc2bd517ac0bce4ec7498644bd16b6db502df8e2, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 ≤ v < 308ab73e97c87bd0e142b11758faab7f88d82854, 4.1 | f2d6cea221d777fab3ba18f805ba4c17c90e0b8b, 91c4f3a87862fd86594d5945512decbfa0b1d13d, 04f0354a4abf6793aa5b3f32e2b019ab206f344d, 5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b, 1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa, dfe848cadfde4179a0691da34f4bed36ff7185b5, dc2bd517ac0bce4ec7498644bd16b6db502df8e2, 308ab73e97c87bd0e142b11758faab7f88d82854 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.