Riskcovery

CVE-2026-72305

VDUSE: avoid leaking information to userspace

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 23, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

VDUSE: avoid leaking information to userspace

The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 41e27a6aca608c9e04f091c29c420d03fafe0313Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 3ae878f262bd1445c8c31511856a99962a05fe16Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before fde25641cbddd0c084e3320d08f755e7e6acfae5Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 690fb82c4122f8c2656fa4f842275132771b68b9Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 00335df9da2011e095f846d645cc2e9fd2907659Affected
  • 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c to before 9c1523803445ee0348f62b77793266dd981596e0Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.217 through 5.15.*Not affected
  • 6.1.184 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.