-

CVE-2026-72305

VDUSE: avoid leaking information to userspace

In the Linux kernel, the following vulnerability has been resolved:

VDUSE: avoid leaking information to userspace

The bounceing is not necessarily page aligned, so current VDUSE can
leak kernel information through mapping bounce pages to
userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking
information to userspace.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 41e27a6aca608c9e04f091c29c420d03fafe0313
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 3ae878f262bd1445c8c31511856a99962a05fe16
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < fde25641cbddd0c084e3320d08f755e7e6acfae5
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 690fb82c4122f8c2656fa4f842275132771b68b9
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 00335df9da2011e095f846d645cc2e9fd2907659
Status affected
Version 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c
Version < 9c1523803445ee0348f62b77793266dd981596e0
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.217
Status unaffected
Version <= 6.1.*
Version 6.1.184
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.102
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5
https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1
https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9
https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659
https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0
https://git.kernel.org/stable/c/3ae878f262bd1445c8c31511856a99962a05fe16
https://git.kernel.org/stable/c/41e27a6aca608c9e04f091c29c420d03fafe0313