Vulnerability in Linux

CVE-2026-72305

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.

Affected products

  • Linux — versions 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c, 5.15, 0

References