CVE-2026-72066
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, the CPU hotplug mechanism has a buffer overflow vulnerability in states_show(). The function writes hotplug state names to a sysfs buffer using sprintf(), which can write past the end of the PAGE_SIZE buffer when many states are registered.
Risk Assessment
Buffer overflow can lead to kernel memory corruption, potentially causing system crashes or privilege escalation.
Recommendation
Apply the Linux kernel patch that uses sysfs_emit_at() instead of sprintf() to bound the output to the buffer size.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.