CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of _PAGE_UNUSED pte bit The _PAGE_UNUSED softbit should not really be lying around. Its sole purpose is to signal to try_to_unmap_one() and try_to_migrate_one() that the page can be discarded instead of being moved / swapped. KVM has no way to know why a page is being unmapped, so it sets the bit on userspace ptes corresponding to unused guest pages every time they get unmapped. KVM has no reasonable way to clear the bit once the page is in use again. While set_ptes() checks and clears the bit, other paths that set new ptes did not. This led to used pages being thrown out as if they were unused, causing guest corruption. Fix the issue by clearing the _PAGE_UNUSED bit for present ptes in set_pte(), i.e. whenever a present pte is getting set. The check in set_ptes() is then redundant and can be removed. Also fix gmap_helper_try_set_pte_unused() to only set the bit if the pte is present; the _PAGE_UNUSED bit is only defined for present ptes and thus should not be set for non-present ptes.

• https://git.kernel.org/stable/c/d4bb00704a66024502261fa7a523c07420249fea
• https://git.kernel.org/stable/c/fda07c8e4b54b9105f1ca73f0adea7b244d405f4

Published

Aug 15, 2026

Last Modified

Aug 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72407In the Linux kernel, the following vulnerability has been re…10
• CVE-2026-72408In the Linux kernel, the following vulnerability has been re…10
• CVE-2026-72409In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-7241A vulnerability was found in Totolink A8000RU 7.1cu.643_b202…9.8
• CVE-2026-72410In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-72411In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-72413In the Linux kernel, the following vulnerability has been re…
• CVE-2026-72414In the Linux kernel, the following vulnerability has been re…
• CVE-2026-72415In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-72416In the Linux kernel, the following vulnerability has been re…7.3
• CVE-2026-72417In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-72418In the Linux kernel, the following vulnerability has been re…7.5