CVE-2026-72180: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_present_huge_pmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmd_swp_uffd_wp() across. The PTE-level change_softleaf_pte() does this correctly; mirror that here, matching what copy_huge_pmd() does for the fork path. Without the carry, a plain mprotect() over a UFFD_WP-marked device-private THP strips the bit and the trap is bypassed on swap-in.

Засегнати продукти

• Linux Linux: 368076f52ebeecd33e10a9f80905d7508b6b6149 преди 2611f7521c6c124b1bef1be4fc319e0ca144502f; 368076f52ebeecd33e10a9f80905d7508b6b6149 преди f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbab
• Linux Linux: 6.19; преди 6.19; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-72180
• https://nvd.nist.gov/vuln/detail/CVE-2026-72180
• https://git.kernel.org/stable/c/2611f7521c6c124b1bef1be4fc319e0ca144502f
• https://git.kernel.org/stable/c/f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbab