mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.
CVE-2026-72172
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-72172
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "c5ef574d57e4a701485c13f26822328c91f05413",
"versionType": "git"
},
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "511a60e71aec308b24722cffc1912bf6befb87bf",
"versionType": "git"
},
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "11f2826e9ee6f24aaa774e3dcd75abbe4b3091b6",
"versionType": "git"
},
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "da5234df0941665f3a3f5b80f3dab94046537be0",
"versionType": "git"
},
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "b91e27bce37cab9f35de0059278ebe457ca9878b",
"versionType": "git"
},
{
"status": "affected",
"version": "6fd3620b342861de9547ea01d28f664892ef51a1",
"lessThan": "cd681403a87085562499d60325b7b45d3be11217",
"versionType": "git"
}
],
"programFiles": [
"mm/mm_init.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.184",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.145",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.97",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.40",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"mm/mm_init.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-72172
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #32965 · Revision 1
- Added to Heist Feed
- Publisher date