CVE-2026-72027 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() properly in compaction_free() free_pages_prepare() can fail but compaction_free() does not handle the failure case. Failed pages should not be added back to cc->freepages for future use, since they can be either PageHWPoison or free_page_is_bad() and might cause data corruption.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe
https://git.kernel.org/stable/c/23afc3786acf359c135093893fb43a436768c832
https://git.kernel.org/stable/c/7da7d599b8a83271c464adfd5ef160202b470570
https://git.kernel.org/stable/c/de8577db09039d4950239b01446ab5ead9028ab4

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() properly in compaction_free() free_pages_prepare() can fail but compaction_free() does not handle the failure case. Failed pages should not be added back to cc->freepages for future use, since they can be either PageHWPoison or free_page_is_bad() and might cause data corruption.
Title		mm/compaction: handle free_pages_prepare() properly in compaction_free()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe https://git.kernel.org/stable/c/23afc3786acf359c135093893fb43a436768c832 https://git.kernel.org/stable/c/7da7d599b8a83271c464adfd5ef160202b470570 https://git.kernel.org/stable/c/de8577db09039d4950239b01446ab5ead9028ab4

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:51:51.219Z

Updated: 2026-08-15T05:51:51.219Z

Reserved: 2026-08-09T03:40:39.901Z

Link: CVE-2026-72027

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:01.843

Modified: 2026-08-15T06:21:01.843

Link: CVE-2026-72027

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72027", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.901Z", "datePublished": "2026-08-15T05:51:51.219Z", "dateUpdated": "2026-08-15T05:51:51.219Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:51:51.219Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/compaction: handle free_pages_prepare() properly in compaction_free()\n\nfree_pages_prepare() can fail but compaction_free() does not handle the\nfailure case. Failed pages should not be added back to cc->freepages for\nfuture use, since they can be either PageHWPoison or free_page_is_bad()\nand might cause data corruption."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["mm/compaction.c"], "versions": [{"version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "lessThan": "de8577db09039d4950239b01446ab5ead9028ab4", "status": "affected", "versionType": "git"}, {"version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "lessThan": "018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe", "status": "affected", "versionType": "git"}, {"version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "lessThan": "23afc3786acf359c135093893fb43a436768c832", "status": "affected", "versionType": "git"}, {"version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "lessThan": "7da7d599b8a83271c464adfd5ef160202b470570", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["mm/compaction.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.2-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/de8577db09039d4950239b01446ab5ead9028ab4"}, {"url": "https://git.kernel.org/stable/c/018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe"}, {"url": "https://git.kernel.org/stable/c/23afc3786acf359c135093893fb43a436768c832"}, {"url": "https://git.kernel.org/stable/c/7da7d599b8a83271c464adfd5ef160202b470570"}], "title": "mm/compaction: handle free_pages_prepare() properly in compaction_free()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["mm/compaction.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "de8577db09039d4950239b01446ab5ead9028ab4", "status": "affected", "version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "versionType": "git"}, {"lessThan": "018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe", "status": "affected", "version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "versionType": "git"}, {"lessThan": "23afc3786acf359c135093893fb43a436768c832", "status": "affected", "version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "versionType": "git"}, {"lessThan": "7da7d599b8a83271c464adfd5ef160202b470570", "status": "affected", "version": "733aea0b3a7bba0451dfc19322665de13a5b7af4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["mm/compaction.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"lessThan": "6.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/compaction: handle free_pages_prepare() properly in compaction_free()\n\nfree_pages_prepare() can fail but compaction_free() does not handle the\nfailure case. Failed pages should not be added back to cc->freepages for\nfuture use, since they can be either PageHWPoison or free_page_is_bad()\nand might cause data corruption."}], "id": "CVE-2026-72027", "lastModified": "2026-08-15T06:21:01.843", "metrics": {}, "published": "2026-08-15T06:21:01.843", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82fe"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/23afc3786acf359c135093893fb43a436768c832"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7da7d599b8a83271c464adfd5ef160202b470570"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/de8577db09039d4950239b01446ab5ead9028ab4"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}