Security Advisory

CVE-2026-72066

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-15 05:52:19

Last updated 2026-08-19 16:35:55

Assigner Linux

CVSS score 7.8

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.

← Browse all CVEs View on cve.org ↗