CVE-2026-72181: mips: sched: Fix CPUMASK_OFFSTACK memory corruption
In the Linux kernel, the following vulnerability has been resolved:
mips: sched: Fix CPUMASKOFFSTACK memory corruption
This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is a pointer. Consequently, sizeof(newmask) evaluates to the pointer size, causing copyfromuser() to clobber the mask pointer. Furthermore, the old logic performed copyfromuser() before allocating the mask.
Fix this by allocating newmask first. To handle variable-sized user masks correctly, use cpumasksize() to truncate overly large user masks or pad undersized masks with zeros before copying the data directly into the allocated buffer.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72181?
CVE-2026-72181 has a risk score of 48, indicating a critical memory management vulnerability.
How do I fix CVE-2026-72181?
To resolve CVE-2026-72181, ensure that you apply the latest patch from the Linux kernel that addresses the CPUMASK_OFFSTACK memory corruption issue.
What systems are affected by CVE-2026-72181?
CVE-2026-72181 affects systems running the Linux kernel with CONFIG_CPUMASK_OFFSTACK enabled.
What is the nature of the vulnerability in CVE-2026-72181?
CVE-2026-72181 is a memory corruption vulnerability that occurs due to an improper handling of cpumask_var_t as a pointer.
What impact does CVE-2026-72181 have on system security?
CVE-2026-72181 can lead to potential arbitrary code execution, data leaks, or system instability.