CVE-2026-72168

mtd: maps: vmu-flash: fix fault in unaligned fixup

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: maps: vmu-flash: fix fault in unaligned fixup

Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data.

Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 1b38399b3f949fd631cd12c96a3857ff4313dd90Affected 47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 1dc6653c47147ac754fced76b0932b8df1d2d414Affected 47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 01928835d80829e615a492aa66c629b953ec7befAffected 47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 19360c25135fccb6bbafbee49a5f66baf9a311afAffected 47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 455519f6b70f46ac6cbf41a75ac76ec5e59040f2Affected 47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 79d1661502c6e4b6f626185cef72cf2fa78116e1Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 1b38399b3f949fd631cd12c96a3857ff4313dd90Affected
47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 1dc6653c47147ac754fced76b0932b8df1d2d414Affected
47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 01928835d80829e615a492aa66c629b953ec7befAffected
47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 19360c25135fccb6bbafbee49a5f66baf9a311afAffected
47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 455519f6b70f46ac6cbf41a75ac76ec5e59040f2Affected
47a72688fae7298e1ad5fdc9bff7e04b6a549620 to before 79d1661502c6e4b6f626185cef72cf2fa78116e1Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.