Security Advisory

CVE-2026-72305

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-15 05:55:22
Last updated 2026-08-23 12:47:13
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.