CVE-2026-72181
Received Received - Intake

Memory Corruption in Linux Kernel Scheduler

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIG_CPUMASK_OFFSTACK is enabled, cpumask_var_t is a pointer. Consequently, sizeof(new_mask) evaluates to the pointer size, causing copy_from_user() to clobber the mask pointer. Furthermore, the old logic performed copy_from_user() before allocating the mask. Fix this by allocating new_mask first. To handle variable-sized user masks correctly, use cpumask_size() to truncate overly large user masks or pad undersized masks with zeros before copying the data directly into the allocated buffer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72181
EUVD
EUVD-2026-58939

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory corruption flaw in the Linux kernel affecting MIPS architecture systems. When CONFIG_CPUMASK_OFFSTACK is enabled, cpumask_var_t becomes a pointer. The sizeof(new_mask) incorrectly evaluates to pointer size instead of the actual mask size, causing copy_from_user() to overwrite the mask pointer. Additionally, the old logic performed copy_from_user() before allocating memory for the mask.

Detection Guidance

This vulnerability is specific to the Linux kernel when CONFIG_CPUMASK_OFFSTACK is enabled. Detection requires checking kernel configuration and running commands to verify the presence of the affected code path. Use uname -a to check kernel version and grep CONFIG_CPUMASK_OFFSTACK /boot/config-$(uname -r) to confirm if the option is enabled.

Impact Analysis

This vulnerability could lead to system crashes, privilege escalation, or arbitrary code execution. Attackers could exploit it to corrupt kernel memory, potentially gaining control over the affected system. Systems using MIPS architecture with CONFIG_CPUMASK_OFFSTACK enabled are particularly at risk.

Mitigation Strategies

Apply the official kernel patch that fixes the memory corruption issue. Update your Linux kernel to a version that includes the fix for CVE-2026-72181. Disable CONFIG_CPUMASK_OFFSTACK if not required, as it is a prerequisite for this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72181. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart