{"id":"CVE-2026-72169","summary":"kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nkho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES\n\nWhen using scratch_scale, the scratch sizes are rounded up to\nCMA_MIN_ALIGNMENT_BYTES since they will be released as MIGRATE_CMA. This\nis not done when using fixed scratch sizes via command line. This can\nresult in user specifying a size which is not aligned, and thus kernel\nreleasing a pageblock that is only partially scratch.\n\nDo the rounding up for both cases in scratch_size_update().","modified":"2026-08-18T03:30:54.709761117Z","published":"2026-08-15T05:53:35.599Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72169.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0e39380a7316122e1b00012b3f3cd3e318b3e7d3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9fefab759f59bf891bef7be15aee4bc7caec7ec3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b8271be34bce151597da5b5179e0648c281322a4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72169.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72169"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3dc92c311498c4d307cfdd0c6c3ac9355b50f683"},{"fixed":"b8271be34bce151597da5b5179e0648c281322a4"},{"fixed":"9fefab759f59bf891bef7be15aee4bc7caec7ec3"},{"fixed":"0e39380a7316122e1b00012b3f3cd3e318b3e7d3"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72169.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.16.0"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72169.json"}}],"schema_version":"1.9.0"}