Not yet scoredPublished Aug 15, 2026

CVE-2026-72169kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

Updated under an hour ago (Oct 27, 2026, 4:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES When using scratch_scale, the scratch sizes are rounded up to CMA_MIN_ALIGNMENT_BYTES since they will be released as MIGRATE_CMA. This is not done when using fixed scratch sizes via command line. This can result in user specifying a size which is not aligned, and thus kernel releasing a pageblock that is only partially scratch. Do the rounding up for both cases in scratch_size_update().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 before b8271be34bce151597da5b5179e0648c281322a4; from 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 before 9fefab759f59bf891bef7be15aee4bc7caec7ec3; 3dc92c311498c4d307cfdd0c6c3ac9355b50f683 builds before 0e39380a7316122e1b00012b3f3cd3e318b3e7d3	CNA record

References

References

https://git.kernel.org/stable/c/b8271be34bce151597da5b5179e0648c281322a4
https://git.kernel.org/stable/c/9fefab759f59bf891bef7be15aee4bc7caec7ec3
https://git.kernel.org/stable/c/0e39380a7316122e1b00012b3f3cd3e318b3e7d3

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.