← CVE Intelligence

CVE-2026-46284

mm/hugetlb: fix early boot crash on parameters without '=' separator PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to hugetlb_add_param(), which dereferences it in strlen() and can crash the system during early boot. Reject NULL values in hugetlb_add_param() and return -EINVAL instead.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 5b47c02967ab770aa7661c8863a21b2fd59e35ff before 2774bcf714739cc6bb86f8812167bb9fbda70f6a; affected 5b47c02967ab770aa7661c8863a21b2fd59e35ff before 357c6d084b6137ae640209c5bfd01180f985c015; affected 5b47c02967ab770aa7661c8863a21b2fd59e35ff before c45b354911d01565156e38d7f6bc07edb51fc34c
Linux / Linuxaffected 6.15; unaffected 0 before 6.15; unaffected 6.18.27 through 6.18.*; unaffected 7.0.4 through 7.0.*; unaffected 7.1 through *

CWE

No CWE identifiers supplied.

References