CVE-2026-72168mtd: maps: vmu-flash: fix fault in unaligned fixup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 2, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 47a72688fae7298e1ad5fdc9bff7e04b6a549620 before 01928835d80829e615a492aa66c629b953ec7bef; from 47a72688fae7298e1ad5fdc9bff7e04b6a549620 before 19360c25135fccb6bbafbee49a5f66baf9a311af; from 47a72688fae7298e1ad5fdc9bff7e04b6a549620 before 455519f6b70f46ac6cbf41a75ac76ec5e59040f2; from 47a72688fae7298e1ad5fdc9bff7e04b6a549620 before 79d1661502c6e4b6f626185cef72cf2fa78116e1 | CNA record |
References
- https://git.kernel.org/stable/c/01928835d80829e615a492aa66c629b953ec7bef
- https://git.kernel.org/stable/c/19360c25135fccb6bbafbee49a5f66baf9a311af
- https://git.kernel.org/stable/c/455519f6b70f46ac6cbf41a75ac76ec5e59040f2
- https://git.kernel.org/stable/c/79d1661502c6e4b6f626185cef72cf2fa78116e1
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.