CVE-2026-72180: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade
In the Linux kernel, the following vulnerability has been resolved:
mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade
changenonpresenthugepmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp() across. The PTE-level changesoftleafpte() does this correctly; mirror that here, matching what copyhugepmd() does for the fork path. Without the carry, a plain mprotect() over a UFFDWP-marked device-private THP strips the bit and the trap is bypassed on swap-in.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72180?
CVE-2026-72180 has a risk score of 34, indicating a moderate level of severity.
How do I fix CVE-2026-72180?
To fix CVE-2026-72180, ensure that your Linux kernel is updated to the latest version that includes the fix for this vulnerability.
What systems are affected by CVE-2026-72180?
CVE-2026-72180 affects systems running vulnerable versions of the Linux kernel that manage device-private PMD entries.
What are the potential impacts of CVE-2026-72180?
The potential impacts of CVE-2026-72180 include unauthorized access to memory due to improper handling of swap entries.
Who should be aware of CVE-2026-72180?
System administrators and developers utilizing the Linux kernel should be aware of CVE-2026-72180 to ensure system security and stability.