CVE-2026-72244gpu/buddy: bail out of try_harder when alignment cannot be honoured
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment cannot be honoured The try_harder contiguous fallback could return a range whose start offset did not match the caller's min_block_size. When a candidate's start is misaligned, realign it: free the misaligned run and reallocate exactly @size at the next lower min_block_size boundary. This keeps the returned size unchanged with no surplus to trim, and rejects the request only when no aligned candidate fits. v2: align misaligned candidates down to min_block_size instead of bailing out, for both the RHS and LHS paths (Matthew).
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0a1844bf0b532d84324453374ad6845f64066c28 before 4289531106ee175a6eb45db7d4f2734d1dae9887; from 0a1844bf0b532d84324453374ad6845f64066c28 before 7185c5262435b93e5eeffa647008992256b9c51a; from 0a1844bf0b532d84324453374ad6845f64066c28 before 419d7d9306491f3e0e417cf794844c73cabee090; from 0a1844bf0b532d84324453374ad6845f64066c28 before 56bc6384314fb9ae98975fb2af8b143097ede3dc | CNA record |
References
- https://git.kernel.org/stable/c/4289531106ee175a6eb45db7d4f2734d1dae9887
- https://git.kernel.org/stable/c/7185c5262435b93e5eeffa647008992256b9c51a
- https://git.kernel.org/stable/c/419d7d9306491f3e0e417cf794844c73cabee090
- https://git.kernel.org/stable/c/56bc6384314fb9ae98975fb2af8b143097ede3dc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.