What’s Vulnerable › Vulnerabilities

CVE-2026-72244: gpu/buddy: bail out of try_harder when alignment cannot be honoured

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment cannot be honoured The try_harder contiguous fallback could return a range whose start offset did not match the caller's min_block_size. When a candidate's start is misaligned, realign it: free the misaligned run and reallocate exactly @size at the next lower min_block_size boundary. This keeps the returned size unchanged with no surplus to trim, and rejects the request only when no aligned candidate fits. v2: align misaligned candidates down to min_block_size instead of bailing out, for both the RHS and LHS paths (Matthew).

Affected products

• Linux kernel: 6.7 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/419d7d9306491f3e0e417cf794844c73cabee090
• https://git.kernel.org/stable/c/4289531106ee175a6eb45db7d4f2734d1dae9887
• https://git.kernel.org/stable/c/56bc6384314fb9ae98975fb2af8b143097ede3dc
• https://git.kernel.org/stable/c/7185c5262435b93e5eeffa647008992256b9c51a

Get alerted when CVE-2026-72244 or the next vulnerability affects your stack