What’s Vulnerable › Vulnerabilities

CVE-2026-72169: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES When using scratch_scale, the scratch sizes are rounded up to CMA_MIN_ALIGNMENT_BYTES since they will be released as MIGRATE_CMA. This is not done when using fixed scratch sizes via command line. This can result in user specifying a size which is not aligned, and thus kernel releasing a pageblock that is only partially scratch. Do the rounding up for both cases in scratch_size_update().

Affected products

• Linux kernel: 6.16 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e39380a7316122e1b00012b3f3cd3e318b3e7d3
• https://git.kernel.org/stable/c/9fefab759f59bf891bef7be15aee4bc7caec7ec3
• https://git.kernel.org/stable/c/b8271be34bce151597da5b5179e0648c281322a4

Get alerted when CVE-2026-72169 or the next vulnerability affects your stack