CVE-2026-72181
Description
In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIG_CPUMASK_OFFSTACK is enabled, cpumask_var_t is a pointer. Consequently, sizeof(new_mask) evaluates to the pointer size, causing copy_from_user() to clobber the mask pointer. Furthermore, the old logic performed copy_from_user() before allocating the mask. Fix this by allocating new_mask first. To handle variable-sized user masks correctly, use cpumask_size() to truncate overly large user masks or pad undersized masks with zeros before copying the data directly into the allocated buffer.
How to fix
- Linux Linux2f7730c03a9deea3ba7a1c980070d363b4ea2046, d20ee42f8226607b5693b2bc2f115ca2d270221a, 15ba8053fe4162c933855f1676fb321cdb6251c7, 3446ffb5d03c36f9ce88ede7ca5be319a2968d96, 87a56c1e8e36d06ebe8640432f911538ded7827d, 1caee6e084a96ada94658f261ced377d85af3f03, a1dd41d00c57efb1fbc6f361c5f48c9d00cca51c, 98e37db4a34d3af3fb2f4648295c25b5e40b20e3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 2f7730c03a9deea3ba7a1c980070d363b4ea2046, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < d20ee42f8226607b5693b2bc2f115ca2d270221a, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 15ba8053fe4162c933855f1676fb321cdb6251c7, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 3446ffb5d03c36f9ce88ede7ca5be319a2968d96, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 87a56c1e8e36d06ebe8640432f911538ded7827d, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 1caee6e084a96ada94658f261ced377d85af3f03, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < a1dd41d00c57efb1fbc6f361c5f48c9d00cca51c, 295cbf6d63165fe4253cf1d9ceadcda47a318b48 ≤ v < 98e37db4a34d3af3fb2f4648295c25b5e40b20e3, 2.6.23 | 2f7730c03a9deea3ba7a1c980070d363b4ea2046, d20ee42f8226607b5693b2bc2f115ca2d270221a, 15ba8053fe4162c933855f1676fb321cdb6251c7, 3446ffb5d03c36f9ce88ede7ca5be319a2968d96, 87a56c1e8e36d06ebe8640432f911538ded7827d, 1caee6e084a96ada94658f261ced377d85af3f03, a1dd41d00c57efb1fbc6f361c5f48c9d00cca51c, 98e37db4a34d3af3fb2f4648295c25b5e40b20e3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.