Riskcovery

CVE-2026-72180

mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade

change_non_present_huge_pmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmd_swp_uffd_wp() across. The PTE-level change_softleaf_pte() does this correctly; mirror that here, matching what copy_huge_pmd() does for the fork path. Without the carry, a plain mprotect() over a UFFD_WP-marked device-private THP strips the bit and the trap is bypassed on swap-in.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 368076f52ebeecd33e10a9f80905d7508b6b6149 to before 2611f7521c6c124b1bef1be4fc319e0ca144502fAffected
  • 368076f52ebeecd33e10a9f80905d7508b6b6149 to before f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbabAffected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.