CVE-2026-72180

Received Received - Intake

Memory Corruption in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_present_huge_pmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmd_swp_uffd_wp() across. The PTE-level change_softleaf_pte() does this correctly; mirror that here, matching what copy_huge_pmd() does for the fork path. Without the carry, a plain mprotect() over a UFFD_WP-marked device-private THP strips the bit and the trap is bypassed on swap-in.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72180

EUVD

EUVD-2026-58938

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in handling device-private huge memory pages. When a writable device-private PMD swap entry is downgraded to a readable one, the pmd_swp_uffd_wp flag is not preserved. This can allow a plain mprotect() operation to strip the UFFD_WP bit, bypassing memory protection traps on swap-in.

Detection Guidance

This vulnerability is specific to the Linux kernel's memory management and requires kernel-level inspection. Detection involves checking kernel logs for related errors or verifying the presence of the vulnerable code path. Commands like dmesg, journalctl, or examining kernel parameters may help identify issues. However, no direct detection commands are provided in the context.

Impact Analysis

An attacker could exploit this to bypass memory protection mechanisms, potentially gaining unauthorized access to sensitive data or escalating privileges. Systems using device-private huge memory pages with userfaultfd write protection are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a specific Linux kernel memory management issue without clear implications for data protection or privacy regulations.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version that resolves this issue. Check your distribution's security advisories for kernel updates addressing CVE-2026-72180. If no patch is available, consider isolating affected systems or applying vendor-specific mitigations.

Hi! I’m here to help you understand CVE-2026-72180. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70