In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned addresses huge_ptep_get() can be handed a virtual address pointing to the middle of a contpmd/contpte mapped hugetlb folio (examples of callers are pagemap_hugetlb_range, page_mapped_in_vma). The arm64 helper rewalks the pgtables in find_num_contig to answer whether the huge pte we have maps a contpmd or a contpte hugetlb folio, and returns CONT_PMDS or CONT_PTES, so that it can collect a/d bits over the contiguous ptes. We can falsely return CONT_PTES instead of CONT_PMDS if the addr is not aligned. On systems where CONT_PTES != CONT_PMDS (meaning page size is 16K), we could collect excess A/D bit state, meaning extra work for the kernel. Even worse, we may iterate beyond the PTE table and dereference a garbage ptep pointer to access physical memory we don't own. Since the ptep pointer is a linear map address, we may run off the end of the linear map or into a hole, dereference a VA not mapped into the kernel pgtables and cause kernel panic. Fix this by aligning the pmdp pointer down to a contpmd base before checking equality with the passed huge pte pointer, to correctly answer whether the huge pte is the base of a contpmd block.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled
    unaligned addresses huge_ptep_get() can be handed a virtual address pointing to the middle of a
    contpmd/contpte mapped hugetlb folio (examples of callers are pagemap_hugetlb_range, page_mapped_in_vma).
    The arm64 helper rewalks the pgtables in find_num_contig to answer whether the huge pte we have maps a
    contpmd or a contpte hugetlb folio, and returns CONT_PMDS or CONT_PTES, so that it can collect a/d bits
    over the contiguous ptes. We can falsely return CONT_PTES instead of CONT_PMDS if the addr is not aligned.
    On systems where CONT_PTES != CONT_PMDS (meaning page size is 16K), we could collect excess A/D bit state,
    meaning extra work for the kernel. Even worse, we may iterate beyond the PTE table and dereference a
    garbage ptep pointer to access physical memory we don't own. Since the ptep pointer is a linear map
    address, we may run off the end of the linear map or into a hole, dereference a VA not mapped into the
    kernel pgtables and cause kernel panic. Fix this by aligning the pmdp pointer down to a contpmd base
    before checking equality with the passed huge pte pointer, to correctly answer whether the huge pte is the
    base of a contpmd block. (CVE-2026-68172)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled     unaligned addresses huge_ptep_get() can be handed a virtual address pointing to the middle of a     contpmd/contpte mapped hugetlb folio (examples of callers are pagemap_hugetlb_range, page_mapped_in_vma).
    The arm64 helper rewalks the pgtables in find_num_contig to answer whether the huge pte we have maps a     contpmd or a contpte hugetlb folio, and returns CONT_PMDS or CONT_PTES, so that it can collect a/d bits     over the contiguous ptes. We can falsely return CONT_PTES instead of CONT_PMDS if the addr is not aligned.
    On systems where CONT_PTES != CONT_PMDS (meaning page size is 16K), we could collect excess A/D bit state,     meaning extra work for the kernel. Even worse, we may iterate beyond the PTE table and dereference a     garbage ptep pointer to access physical memory we don't own. Since the ptep pointer is a linear map     address, we may run off the end of the linear map or into a hole, dereference a VA not mapped into the     kernel pgtables and cause kernel panic. Fix this by aligning the pmdp pointer down to a contpmd base     before checking equality with the passed huge pte pointer, to correctly answer whether the huge pte is the     base of a contpmd block. (CVE-2026-68172)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365768	Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)	Nessus	Ubuntu Local Security Checks	Local	medium
365767	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8887-1)	Nessus	Ubuntu Local Security Checks	Local	medium
365463	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8889-1)	Nessus	Ubuntu Local Security Checks	Local	medium
472268	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20085.0.0	Tenable Cloud Security	Google COS Security Checks	Local	high
472268	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20085.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
472192	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Cloud Security	Google COS Security Checks	Local	high
472192	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
334755	Linux Distros Unpatched Vulnerability : CVE-2026-68172	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-68172

high

Tenable Plugins

medium

medium

medium

high

high

high

high

high