CVE-2026-72169: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES
In the Linux kernel, the following vulnerability has been resolved:
kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES
When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed scratch sizes via command line. This can result in user specifying a size which is not aligned, and thus kernel releasing a pageblock that is only partially scratch.
Do the rounding up for both cases in scratchsizeupdate().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72169?
CVE-2026-72169 has a severity risk level of 21.
What systems are affected by CVE-2026-72169?
CVE-2026-72169 affects the Linux kernel version that includes the vulnerable kho functionality.
How do I fix CVE-2026-72169?
To fix CVE-2026-72169, update the Linux kernel to a version that implements the necessary alignment for scratch sizes.
What does CVE-2026-72169 affect in the Linux kernel?
CVE-2026-72169 affects the handling of scratch sizes when using scratch_scale, ensuring they align with CMA_MIN_ALIGNMENT_BYTES.
When was CVE-2026-72169 published?
CVE-2026-72169 was published on August 15, 2026.