SB20260925142 - Integer overflow in Linux kernel mm

Description

This security bulletin contains information about 1 vulnerability.

1) Integer overflow (CVE-ID: CVE-2026-93227)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 5.6 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to cause a denial of service.

The vulnerability exists due to improper handling of an out-of-range page frame number in deferred_grow_zone() when initializing deferred struct pages during boot. A local privileged user can boot the system with a large CMA reservation to cause a denial of service.

The issue requires CONFIG_DEFERRED_STRUCT_PAGE_INIT and CONFIG_CMA, a node RAM end not aligned to PAGES_PER_SECTION boundaries, and previously initialized deferred struct pages.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/45489d4f95802903ab35799b400b346fa4e13151
• https://git.kernel.org/stable/c/84339578c2d6936ac3a93cd1f0bbaa3468a988f2
• https://git.kernel.org/stable/c/97090500d776c3f6d08e857e3a0a7cf092999094