CVE-2026-72212— 内存热插拔altmap错误路径传递问题
影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 6b8f0798b85aa529011570369db985a788f3003f< 3833e6abdbbfb59ec8203a84a84206cb7ffb41ac | affected |
6b8f0798b85aa529011570369db985a788f3003f< 722e6c54bde6391fb95f0357f555aca887c7b18c | affected | ||
6b8f0798b85aa529011570369db985a788f3003f< 2f9e3ec17c3d2093c664c00a027588a446c39894 | affected | ||
6b8f0798b85aa529011570369db985a788f3003f< 2fac4afa0e2e68841334c78c1821e49f74fbc66a | affected | ||
6.8 | affected | ||
< 6.8 | unaffected | ||
6.12.97≤ 6.12.* | unaffected | ||
6.18.40≤ 6.18.* | unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-72212 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
mm/memory_hotplug: fix incorrect altmap passing in error path
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing in error path In create_altmaps_and_memory_blocks(), when arch_add_memory() succeeds with memmap_on_memory enabled, the vmemmap pages are allocated from params.altmap. If create_memory_block_devices() subsequently fails, the error path calls arch_remove_memory() with a NULL altmap instead of params.altmap. This is a bug that could lead to memory corruption. Since altmap is NULL, vmemmap_free() falls back to freeing the vmemmap pages into the system buddy allocator via free_pages() instead of the altmap. arch_remove_memory() then immediately destroys the physical linear mapping for this memory. This injects unowned pages into the buddy allocator, causing machine checks or memory corruption if the system later attempts to allocate and use those freed pages. Fix this by passing params.altmap to arch_remove_memory() in the error path.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-72212 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-72212 的情报信息
请登录查看更多情报信息。
CVE-2026-72212 补丁与修复 (4)
同批安全公告 · Linux · 2026-08-15 · 共 848 条
| CVE-2026-72257 | qcom q6apm NULL指针解引用漏洞 | |
| CVE-2026-72269 | uvesafb 模块 uvesafb_probe 函数潜在内存泄漏漏洞 | |
| CVE-2026-72268 | t dfxfb tdfxfb_probe 内存泄漏漏洞 | |
| CVE-2026-72267 | fbdev carminefb alloc_carmine_fb()潜在内存泄漏漏洞 | |
| CVE-2026-72266 | vesafb: vesafb_probe() 内存泄漏漏洞 | |
| CVE-2026-72265 | NVIDIA fbdev 驱动 nvidiafb_probe 内存泄漏漏洞 | |
| CVE-2026-72264 | tridentfb：trident_pci_probe() 潜在内存泄漏 | |
| CVE-2026-72262 | ASoC: SOF: bytes_ext 堆溢出漏洞 | |
| CVE-2026-72263 | ASoC SOF拓扑内存泄漏漏洞 | |
| CVE-2026-72261 | ASoC SOF ipc3-control 验证 snd_sof_update_control 中的大小 | |
| CVE-2026-72260 | Mediatek MT8192 SoC驱动运行时恢复检查漏洞 | |
| CVE-2026-72259 | mediatek mt8192 资源释放漏洞 | |
| CVE-2026-72258 | MT8183内存清理释放漏洞 | |
| CVE-2026-72256 | netfilter xt_cluster 哈希匹配中拒绝模板连接跟踪漏洞 | |
| CVE-2026-72246 | netfilter flowtable 隧道路由方向设置错误漏洞 | |
| CVE-2026-72249 | netfilter flowtable IPIP头部推送方向目标地址使用漏洞 | |
| CVE-2026-72248 | netfilter flowtable IPIP隧道直接转发漏洞 | |
| CVE-2026-72247 | Linux内核 nf_conncount 连接数模块元组去重时区域比较逻辑错误漏洞 | |
| CVE-2026-72250 | Netfilter nf_conntrack 漏洞：IPv6分片重组后mac_header调整防护 | |
| CVE-2026-72245 | host1x: host1x_device_parse_dt() 设备引用泄露漏洞 |
显示前 20 条，共 848 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-72212
暂无评论