CVE-2026-98373

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/hugetlb: preserve mremap address delta when skipping page tables<br /> <br /> move_hugetlb_page_tables() optimizes mremap() by advancing to the last<br /> entry in the page table when the source page table does not exist, either<br /> initially or after unsharing a PMD table. The common loop increment then<br /> steps to the first entry in the next page table.<br /> <br /> However, the code advances both the source and destination addresses to<br /> the last entries in their respective page tables, which is wrong. The<br /> destination address must be advanced only by the same amount as the source<br /> address.<br /> <br /> If the source and destination offsets within their page tables differ, the<br /> destination address can be advanced too far, causing follow-up issues. <br /> Fix this by advancing the destination address by the source advance<br /> distance.<br /> <br /> With a reproducer, we were able to trigger a kernel panic on x86-64. With<br /> this fix in place, we can no longer reproduce the issue.