> CVE-2026-72305

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.

> AFFECTED_PRODUCTS

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

VDUSE: avoid leaking information to userspace

> HISTORIQUE DES MODIFICATIONS

> REFERENCES