Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72172

mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < c5ef574d57e4a701485c13f26822328c91f05413affected
  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < 511a60e71aec308b24722cffc1912bf6befb87bfaffected
  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < 11f2826e9ee6f24aaa774e3dcd75abbe4b3091b6affected
  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < da5234df0941665f3a3f5b80f3dab94046537be0affected
  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < b91e27bce37cab9f35de0059278ebe457ca9878baffected
  • 6fd3620b342861de9547ea01d28f664892ef51a1 to < cd681403a87085562499d60325b7b45d3be11217affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.184 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References