In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero mappings page_table_check_set() and page_table_check_clear() account mappings based on PageAnon(). Shared zero-page PTEs and huge zero PMDs are special mappings, but page_table_check can still account them as file-backed pages. An unprivileged process can populate enough zero mappings to overflow file_map_count and hit the existing BUG_ON(). The PTE path can do this with the shared zero page, and the PMD path can do the same with huge zero mappings. Skip special zero mappings in the user page-table accounting paths. Keep the PTE-side pte_special() check, and identify huge zero PMDs from the mapped folio instead of pmd_special(). That covers architectures where pmd_special() is a no-op without adding huge_zero_pfn checks to the generic counter helpers.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero
    mappings page_table_check_set() and page_table_check_clear() account mappings based on PageAnon(). Shared
    zero-page PTEs and huge zero PMDs are special mappings, but page_table_check can still account them as
    file-backed pages. An unprivileged process can populate enough zero mappings to overflow file_map_count
    and hit the existing BUG_ON(). The PTE path can do this with the shared zero page, and the PMD path can do
    the same with huge zero mappings. Skip special zero mappings in the user page-table accounting paths. Keep
    the PTE-side pte_special() check, and identify huge zero PMDs from the mapped folio instead of
    pmd_special(). That covers architectures where pmd_special() is a no-op without adding huge_zero_pfn
    checks to the generic counter helpers. (CVE-2026-74600)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/page_table_check: skip special zero mappings page_table_check_set() and page_table_check_clear()     account mappings based on PageAnon(). Shared zero-page PTEs and huge zero PMDs are special mappings, but     page_table_check can still account them as file-backed pages. An unprivileged process can populate enough     zero mappings to overflow file_map_count and hit the existing BUG_ON(). The PTE path can do this with the     shared zero page, and the PMD path can do the same with huge zero mappings. Skip special zero mappings in     the user page-table accounting paths. Keep the PTE-side pte_special() check, and identify huge zero PMDs     from the mapped folio instead of pmd_special(). That covers architectures where pmd_special() is a no-op     without adding huge_zero_pfn checks to the generic counter helpers. (CVE-2026-74600)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
470978	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20085.0.0	Tenable Cloud Security	Google COS Security Checks	Local	medium
470978	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20085.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
470524	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.28	Tenable Cloud Security	Google COS Security Checks	Local	medium
470524	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.28	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
339003	Linux Distros Unpatched Vulnerability : CVE-2026-74600	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-74600

medium

Tenable Plugins

medium

medium

medium

medium

medium