Riskcovery

CVE-2026-72027

mm/compaction: handle free_pages_prepare() properly in compaction_free()

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/compaction: handle free_pages_prepare() properly in compaction_free()

free_pages_prepare() can fail but compaction_free() does not handle the failure case. Failed pages should not be added back to cc->freepages for future use, since they can be either PageHWPoison or free_page_is_bad() and might cause data corruption.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 733aea0b3a7bba0451dfc19322665de13a5b7af4 to before de8577db09039d4950239b01446ab5ead9028ab4Affected
  • 733aea0b3a7bba0451dfc19322665de13a5b7af4 to before 018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82feAffected
  • 733aea0b3a7bba0451dfc19322665de13a5b7af4 to before 23afc3786acf359c135093893fb43a436768c832Affected
  • 733aea0b3a7bba0451dfc19322665de13a5b7af4 to before 7da7d599b8a83271c464adfd5ef160202b470570Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.