CVE-2026-72305: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.

Засегнати продукти

• Linux Linux: 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 41e27a6aca608c9e04f091c29c420d03fafe0313; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 3ae878f262bd1445c8c31511856a99962a05fe16; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди fde25641cbddd0c084e3320d08f755e7e6acfae5; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 690fb82c4122f8c2656fa4f842275132771b68b9; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 00335df9da2011e095f846d645cc2e9fd2907659; 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c преди 9c1523803445ee0348f62b77793266dd981596e0
• Linux Linux: 5.15; преди 5.15; 5.15.217 до 5.15.*; 6.1.184 до 6.1.*; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-72305
• https://nvd.nist.gov/vuln/detail/CVE-2026-72305
• https://git.kernel.org/stable/c/41e27a6aca608c9e04f091c29c420d03fafe0313
• https://git.kernel.org/stable/c/3ae878f262bd1445c8c31511856a99962a05fe16
• https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5
• https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1
• https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9
• https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659
• https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0