CVE-2026-72169kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES When using scratch_scale, the scratch sizes are rounded up to CMA_MIN_ALIGNMENT_BYTES since they will be released as MIGRATE_CMA. This is not done when using fixed scratch sizes via command line. This can result in user specifying a size which is not aligned, and thus kernel releasing a pageblock that is only partially scratch. Do the rounding up for both cases in scratch_size_update().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 before b8271be34bce151597da5b5179e0648c281322a4; from 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 before 9fefab759f59bf891bef7be15aee4bc7caec7ec3; 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 builds before 0e39380a7316122e1b00012b3f3cd3e318b3e7d3 | CNA record |
References
- https://git.kernel.org/stable/c/b8271be34bce151597da5b5179e0648c281322a4
- https://git.kernel.org/stable/c/9fefab759f59bf891bef7be15aee4bc7caec7ec3
- https://git.kernel.org/stable/c/0e39380a7316122e1b00012b3f3cd3e318b3e7d3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.