CVE-2026-72027: mm/compaction: handle free_pages_prepare() properly in compaction_free()
In the Linux kernel, the following vulnerability has been resolved:
mm/compaction: handle freepagesprepare() properly in compactionfree()
freepagesprepare() can fail but compactionfree() does not handle the failure case. Failed pages should not be added back to cc->freepages for future use, since they can be either PageHWPoison or freepageisbad() and might cause data corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72027?
CVE-2026-72027 has a risk score of 46, indicating a moderate severity level.
How do I fix CVE-2026-72027?
To fix CVE-2026-72027, upgrade to the latest version of the Linux kernel where the vulnerability has been patched.
What vulnerabilities does CVE-2026-72027 address?
CVE-2026-72027 addresses the improper handling of failure cases in the free_pages_prepare() function within the Linux kernel's memory compaction.
Is CVE-2026-72027 a widely exploited vulnerability?
As of now, there is no indication that CVE-2026-72027 is widely exploited in the wild.
Who is affected by CVE-2026-72027?
Anyone using the affected versions of the Linux kernel should consider upgrading to mitigate the risk associated with CVE-2026-72027.