{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.10-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h  get_align_mask() returns huge_page_mask_align() for hugetlbfs, but get_align_bits() adds va_align.bits regardless, so vm_unmapped_area() returns an address off the huge page boundary and __unmap_hugepage_range() hits BUG_ON(start \u0026 ~huge_page_mask(h)) at teardown.  This can be triggered on Carrizo and FX-8370E, both hstates.  Pass the file to get_align_bits() and skip the randomisation for hugetlbfs.    [ bp: Massage commit message. ]",
  "id": "DEBIAN-CVE-2026-98729",
  "modified": "2026-10-19T04:47:29.990913277Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-98729"
    }
  ],
  "upstream": [
    "CVE-2026-98729"
  ]
}