An error in the Linux kernel’s hugetlb support causes the mremap system call to advance addresses incorrectly when page tables are skipped. This bug involves faulty address advancement, leading to a kernel panic and loss of system availability. The vulnerability results in memory corruption as described by CWE-823.

All Linux kernel builds that have not yet incorporated the mremap address delta fix in the mm/hugetlb subsystem. The CVE data does not provide a specific version list, so any kernel before the relevant patch may be affected.

Based on the description, it is inferred that a local user with sufficient privileges to invoke mremap on hugetlb pages provides the attack vector. The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, so no public exploitation guidance is available. The CVSS score is 7.0. If an attacker can trigger the erroneous address advancement, the kernel will panic, causing a denial of service. Exploitation requires the attacker to have system or process access that allows the mremap call, which typically means local privileged or untrusted code running on the affected system.