VULNERABILITY INTELLIGENCE
CVE-2026-72305
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-08-15
Last modified2026-08-23
Description
In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.