CVE-2026-72305
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-08-15
Modified: 2026-11-06
First seen: 2026-11-06
Status: pending_score
Description
In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 41e27a6aca608c9e04f091c29c420d03fafe0313 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 3ae878f262bd1445c8c31511856a99962a05fe16 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < fde25641cbddd0c084e3320d08f755e7e6acfae5 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 690fb82c4122f8c2656fa4f842275132771b68b9 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 00335df9da2011e095f846d645cc2e9fd2907659 |
| Linux | Linux | 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c < 9c1523803445ee0348f62b77793266dd981596e0 |
| Linux | Linux | 5.15 |