CVE-2026-72305
2026-08-15
06h22 +00:00
06h22 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In the Linux kernel, the following vulnerability has been resolved:
VDUSE: avoid leaking information to userspace
The bounceing is not necessarily page aligned, so current VDUSE can
leak kernel information through mapping bounce pages to
userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking
information to userspace.
