CVE-2026-72180
CVE CVE-2026-72180EUVD EUVD-2026-58938Published 2026-08-15T05:53:43.000ZLast changed 2026-08-17T05:09:43.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_present_huge_pmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmd_swp_uffd_wp() across. The PTE-level change_softleaf_pte() does this correctly; mirror that here, matching what copy_huge_pmd() does for the fork path. Without the carry, a plain mprotect() over a UFFD_WP-marked device-private THP strips the bit and the trap is bypassed on swap-in.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 368076f52ebeecd33e10a9f80905d7508b6b6149 <f7e2c21bd1f57cd5350eecdfdb5d6025ca6afbab; patch: 7.1.5; 6.19; patch: 0; patch: 7.2; 368076f52ebeecd33e10a9f80905d7508b6b6149 <2611f7521c6c124b1bef1be4fc319e0ca144502f
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.