CVE-2026-72305 in Linux
Résumé
par MITRE • 15/08/2026
In the Linux kernel, the following vulnerability has been resolved:
VDUSE: avoid leaking information to userspace
The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.