Bug 2516391 (CVE-2026-72169) - CVE-2026-72169 kernel: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES
Summary: CVE-2026-72169 kernel: kho: make sure scratch size is always aligned by CMA_M...
Keywords:
Status: NEW
Alias: CVE-2026-72169
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-15 06:10 UTC by OSIDB Bzimport
Modified: 2026-08-18 08:45 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-15 06:10:02 UTC 
In the Linux kernel, the following vulnerability has been resolved:

kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

When using scratch_scale, the scratch sizes are rounded up to
CMA_MIN_ALIGNMENT_BYTES since they will be released as MIGRATE_CMA. This
is not done when using fixed scratch sizes via command line. This can
result in user specifying a size which is not aligned, and thus kernel
releasing a pageblock that is only partially scratch.

Do the rounding up for both cases in scratch_size_update().
Comment 1 gkamathe 2026-08-18 08:43:22 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081537-CVE-2026-72169-b02b@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.