SB2026050780 - Improper control of a resource through its lifetime in Linux kernel alpha mm

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-43258)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper TLB invalidation in memory compaction and page migration handling when migrating pages during memory compaction. A local user can trigger memory compaction activity to cause a denial of service.

The issue can result in sporadic user-space crashes and heap corruption on Alpha systems when memory compaction is enabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/03e42b5f7ad4c2c3db8bd384bab7990d5d53c90f
• https://git.kernel.org/stable/c/bab8d762a8dbb816b10011e13b87d1bca91e5f77
• https://git.kernel.org/stable/c/d4ca6ca2c6f5a1d19d9014c5b36d96637846b5d6
• https://git.kernel.org/stable/c/dd5712f3379cfe760267cdd28ff957d9ab4e51c7