CVE-2026-64181
7.8Linux · Kernel
A memory management vulnerability in the Linux kernel on x86 32-bit systems with THP enabled allows local users with low privileges to achieve high impact confidentiality, integrity, and availability via missing support for pmd_special() and pud_special().
Executive summary
A local memory management flaw in the Linux kernel on x86 32-bit architectures allows low-privileged users to achieve full system compromise through unhandled special page flags.
Vulnerability
This is an improper handling of memory flags vulnerability in the mm component involving __vm_normal_page(), requiring low privileges and local access to execute.
Business impact
Successful exploitation of this vulnerability could grant an attacker full control over the affected operating system instance, leading to complete confidentiality loss, data integrity compromise, and system downtime via crashes or resource exhaustion. The CVSS score of 7.8 indicates a high severity threat, primarily constrained by the requirement for local access and low privileges.
Remediation
Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later, or apply the official upstream patches provided in the vendor advisory.
Proactive Monitoring: Monitor system logs for kernel warnings, bad rss-counter states, or page state errors that may indicate exploitation or instability.
Compensating Controls: Restrict local shell access and auditing user accounts to ensure only trusted personnel possess local execution privileges on vulnerable 32-bit hosts.
Exploitation status
Public Exploit Available: No
Analyst recommendation
System administrators maintaining x86 32-bit Linux environments with Transparent Huge Pages enabled must prioritize updating their kernel packages to the patched versions. Because local attackers can leverage this defect for full system compromise, prompt patching is vital to maintain environment stability and security.