CVE-2026-72305 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659
https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1
https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9
https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0
https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.
Title		VDUSE: avoid leaking information to userspace
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659 https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1 https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9 https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0 https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:55:22.914Z

Updated: 2026-08-15T05:55:22.914Z

Reserved: 2026-08-09T03:40:39.918Z

Link: CVE-2026-72305

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:03.217

Modified: 2026-08-15T06:22:03.217

Link: CVE-2026-72305

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72305", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.918Z", "datePublished": "2026-08-15T05:55:22.914Z", "dateUpdated": "2026-08-15T05:55:22.914Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:55:22.914Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nVDUSE: avoid leaking information to userspace\n\nThe bounceing is not necessarily page aligned, so current VDUSE can\nleak kernel information through mapping bounce pages to\nuserspace. Allocate bounce pages with __GFP_ZERO to avoid leaking\ninformation to userspace."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/vdpa/vdpa_user/iova_domain.c", "drivers/vdpa/vdpa_user/vduse_dev.c"], "versions": [{"version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "lessThan": "fde25641cbddd0c084e3320d08f755e7e6acfae5", "status": "affected", "versionType": "git"}, {"version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "lessThan": "5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1", "status": "affected", "versionType": "git"}, {"version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "lessThan": "690fb82c4122f8c2656fa4f842275132771b68b9", "status": "affected", "versionType": "git"}, {"version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "lessThan": "00335df9da2011e095f846d645cc2e9fd2907659", "status": "affected", "versionType": "git"}, {"version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "lessThan": "9c1523803445ee0348f62b77793266dd981596e0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/vdpa/vdpa_user/iova_domain.c", "drivers/vdpa/vdpa_user/vduse_dev.c"], "versions": [{"version": "5.15", "status": "affected"}, {"version": "0", "lessThan": "5.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5"}, {"url": "https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1"}, {"url": "https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9"}, {"url": "https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659"}, {"url": "https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0"}], "title": "VDUSE: avoid leaking information to userspace", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/vdpa/vdpa_user/iova_domain.c", "drivers/vdpa/vdpa_user/vduse_dev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "fde25641cbddd0c084e3320d08f755e7e6acfae5", "status": "affected", "version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "versionType": "git"}, {"lessThan": "5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1", "status": "affected", "version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "versionType": "git"}, {"lessThan": "690fb82c4122f8c2656fa4f842275132771b68b9", "status": "affected", "version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "versionType": "git"}, {"lessThan": "00335df9da2011e095f846d645cc2e9fd2907659", "status": "affected", "version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "versionType": "git"}, {"lessThan": "9c1523803445ee0348f62b77793266dd981596e0", "status": "affected", "version": "8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/vdpa/vdpa_user/iova_domain.c", "drivers/vdpa/vdpa_user/vduse_dev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"lessThan": "5.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nVDUSE: avoid leaking information to userspace\n\nThe bounceing is not necessarily page aligned, so current VDUSE can\nleak kernel information through mapping bounce pages to\nuserspace. Allocate bounce pages with __GFP_ZERO to avoid leaking\ninformation to userspace."}], "id": "CVE-2026-72305", "lastModified": "2026-08-15T06:22:03.217", "metrics": {}, "published": "2026-08-15T06:22:03.217", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}