CVE-2026-72305: VDUSE: avoid leaking information to userspace

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

VDUSE: avoid leaking information to userspace

The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with GFPZERO to avoid leaking information to userspace.

Affected Software

1 affected component

Linux Linux kernel

Event History

Aug 15, 2026

CVE Published

via MITRE·05:55 AM

Data Sourced

via MITRE·05:55 AM

Description

Frequently Asked Questions

What is the severity of CVE-2026-72305?

CVE-2026-72305 has a risk rating of 27, indicating a significant level of vulnerability.

How do I fix CVE-2026-72305?

To mitigate CVE-2026-72305, ensure that bounce pages in the VDUSE component are allocated with the __GFP_ZERO flag.

What type of information can be leaked due to CVE-2026-72305?

CVE-2026-72305 can lead to the leakage of sensitive kernel information to userspace.

Which software is affected by CVE-2026-72305?

The vulnerability CVE-2026-72305 affects the Linux kernel associated with VDUSE.

When was CVE-2026-72305 published?

CVE-2026-72305 was published on August 15, 2026.

CVE-2026-72305: VDUSE: avoid leaking information to userspace

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-72305?

How do I fix CVE-2026-72305?

What type of information can be leaked due to CVE-2026-72305?

Which software is affected by CVE-2026-72305?

When was CVE-2026-72305 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-72305?

How do I fix CVE-2026-72305?

What type of information can be leaked due to CVE-2026-72305?

Which software is affected by CVE-2026-72305?

When was CVE-2026-72305 published?