CVE-2026-72066 in Linux
요약
\~에 의해 MITRE • 2026. 08. 15.
In the Linux kernel, the following vulnerability has been resolved:
cpu: hotplug: Bound hotplug states sysfs output
states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer.
Use sysfs_emit_at() so output is bounded.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.