Strix
57K

CVE-2026-72168

UnknownEPSS 0.20%

Last modified

CVE-2026-72168 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.

Metrics

EPSS Probability
0.20%

10.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 47a72688fae7298e1ad5fdc9bff7e04b6a549620, < 01928835d80829e615a492aa66c629b953ec7bef; >= 47a72688fae7298e1ad5fdc9bff7e04b6a549620, < 19360c25135fccb6bbafbee49a5f66baf9a311af; >= 47a72688fae7298e1ad5fdc9bff7e04b6a549620, < 455519f6b70f46ac6cbf41a75ac76ec5e59040f2; >= 47a72688fae7298e1ad5fdc9bff7e04b6a549620, < 79d1661502c6e4b6f626185cef72cf2fa78116e1
LinuxLinux2.6.30

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72168?
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.
How severe is CVE-2026-72168?
Severity scoring for CVE-2026-72168 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72168?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72168?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST