CVE-2026-72027

Summary

In the Linux kernel, the following vulnerability has been resolved:

mm/compaction: handle free_pages_prepare() properly in compaction_free()

free_pages_prepare() can fail but compaction_free() does not handle the failure case. Failed pages should not be added back to cc->freepages for future use, since they can be either PageHWPoison or free_page_is_bad() and might cause data corruption.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux733aea0b3a7bba0451dfc19322665de13a5b7af4 < de8577db09039d4950239b01446ab5ead9028ab4affected
LinuxLinux733aea0b3a7bba0451dfc19322665de13a5b7af4 < 018d7ad26cb8bdfe9842f2ca68a42b0bfdcc82feaffected
LinuxLinux733aea0b3a7bba0451dfc19322665de13a5b7af4 < 23afc3786acf359c135093893fb43a436768c832affected
LinuxLinux733aea0b3a7bba0451dfc19322665de13a5b7af4 < 7da7d599b8a83271c464adfd5ef160202b470570affected
LinuxLinux6.9affected
LinuxLinux0 < 6.9unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References