VDB
RHSA-2026:59723
RHSA-2026:59723
PUBLISHED
CVSS 7.800000190734863 HIGH
A resource exhaustion vulnerability was found in the Kernel Same-page Merging (KSM) subsystem of the Linux kernel. When scanning processes with large sparse virtual memory mappings (e.g., 32 TiB with one mapped page), ksmd inefficiently walks every address rather than skipping unmapped holes. This causes ksmd to consume 100% CPU for extended periods.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | kernel-rt-64k-modules-core-0:5.14.0-687.42.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | libperf-debuginfo-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | perf-debuginfo-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debug-debuginfo-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-64k-debug-debuginfo-0:5.14.0-687.42.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | python3-perf-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | rv-0:5.14.0-687.42.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debug-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-tools-libs-devel-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | perf-debuginfo-0:5.14.0-687.42.1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-tools-debuginfo-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | python3-perf-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-tools-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-rt-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debuginfo-common-ppc64le-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | python3-perf-debuginfo-0:5.14.0-687.42.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debuginfo-common-aarch64-0:5.14.0-687.42.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debug-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | libperf-debuginfo-0:5.14.0-687.42.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 9) | 0:5.14.0-687.42.1.el9_8 |
| Red Hat | kernel-debuginfo-0:5.14.0-687.42.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9) | 0:5.14.0-687.42.1.el9_8 |
…and 283 more
Timeline
- Aug 26, 2026 CVE Published
- Sep 1, 2026 CVE Updated
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:59723 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2422696 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2432681 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2466994 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492095 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492112 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492735 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492747 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492770 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2502872 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2502889 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2507290 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2507301 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2520980 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59723.json advisory
- https://access.redhat.com/security/cve/CVE-2025-68211 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-68211 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68211 advisory
- https://lore.kernel.org/linux-cve-announce/2025121634-CVE-2025-68211-180a@gregkh/T advisory
…and 48 more