PT-2026-47356 · Linux · Linux

Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-46284

NVD

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: fix early boot crash on parameters without '=' separator

If hugepages, hugepagesz, or default hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to hugetlb add param(), which dereferences it in strlen() and can crash the system during early boot.

Reject NULL values in hugetlb add param() and return -EINVAL instead.

Related Identifiers

CVE-2026-46284

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-46284 · Security Note
• https://git.kernel.org/stable/c/2774bcf714739cc6bb86f8812167bb9fbda70f6a · Note
• https://git.kernel.org/stable/c/357c6d084b6137ae640209c5bfd01180f985c015 · Note
• https://git.kernel.org/stable/c/c45b354911d01565156e38d7f6bc07edb51fc34c · Note