Riskcovery

CVE-2026-72244

gpu/buddy: bail out of try_harder when alignment cannot be honoured

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpu/buddy: bail out of try_harder when alignment cannot be honoured

The try_harder contiguous fallback could return a range whose start offset did not match the caller's min_block_size. When a candidate's start is misaligned, realign it: free the misaligned run and reallocate exactly @size at the next lower min_block_size boundary. This keeps the returned size unchanged with no surplus to trim, and rejects the request only when no aligned candidate fits.

v2: align misaligned candidates down to min_block_size instead of bailing out, for both the RHS and LHS paths (Matthew).

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0a1844bf0b532d84324453374ad6845f64066c28 to before 4289531106ee175a6eb45db7d4f2734d1dae9887Affected
  • 0a1844bf0b532d84324453374ad6845f64066c28 to before 7185c5262435b93e5eeffa647008992256b9c51aAffected
  • 0a1844bf0b532d84324453374ad6845f64066c28 to before 419d7d9306491f3e0e417cf794844c73cabee090Affected
  • 0a1844bf0b532d84324453374ad6845f64066c28 to before 56bc6384314fb9ae98975fb2af8b143097ede3dcAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.