mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.17 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.
Références
- https://git.kernel.org/stable/c/c5ef574d57e4a701485c13f26822328c91f05413
- https://git.kernel.org/stable/c/511a60e71aec308b24722cffc1912bf6befb87bf
- https://git.kernel.org/stable/c/11f2826e9ee6f24aaa774e3dcd75abbe4b3091b6
- https://git.kernel.org/stable/c/da5234df0941665f3a3f5b80f3dab94046537be0
- https://git.kernel.org/stable/c/b91e27bce37cab9f35de0059278ebe457ca9878b
- https://git.kernel.org/stable/c/cd681403a87085562499d60325b7b45d3be11217
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-58930
- GCVE · GCVE-0-2026-72172
Avis du CERT-FR
- CERTFR-2026-AVI-1432 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 6fd3620b342861de9547ea01d28f664892ef51a1 < c5ef574d57e4a701485c13f26822328c91f05413 ; affected 6fd3620b342861de9547ea01d28f664892ef51a1 < 511a60e71aec308b24722cffc1912bf6befb87bf ; affected 6fd3620b342861de9547ea01d28f664892ef51a1 < 11f2826e9ee6f24aaa774e3dcd75abbe4b3091b6 ; affected 6fd3620b342861de9547ea01d28f664892ef51a1 < da5234df0941665f3a3f5b80f3dab94046537be0 ; affected 6fd3620b342861de9547ea01d28f664892ef51a1 < b91e27bce37cab9f35de0059278ebe457ca9878b ; affected 6fd3620b342861de9547ea01d28f664892ef51a1 < cd681403a87085562499d60325b7b45d3be11217 |
| Linux · Linux | affected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.184 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* ; unaffected 6.12.97 ≤ 6.12.* ; unaffected 6.18.40 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |