CVE-2026-72168
Received Received - Intake

Memory Corruption Fix in Linux Kernel MTD VMU-Flash

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72168
EUVD
EUVD-2026-58926

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a fault in the mtd maps vmu-flash driver. It occurs due to improper memory allocation where kzalloc_obj() should be used instead of kmalloc_obj() to prevent access to uninitialized data. This can lead to a runtime error like 'Fault in unaligned fixup' during operations such as mtd_get_fact_prot_info.

Detection Guidance

This vulnerability is specific to the Linux kernel's mtd subsystem, particularly the vmu-flash driver. Detection requires checking kernel logs for the error message 'Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info' or verifying if the affected driver is loaded.

Impact Analysis

This vulnerability may cause system crashes or instability when interacting with the affected mtd maps vmu-flash driver. It could lead to data corruption or unexpected behavior in systems using this driver, potentially disrupting operations that rely on the affected functionality.

Mitigation Strategies

Apply the kernel patch that replaces kmalloc_obj() with kzalloc_obj() in the vmu-flash driver. Update to a kernel version containing the fix or manually patch the affected code.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72168. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart