CVE Database›Document archive›CVE-2026-72244

CVE-2026-72244

kernel: gpu/buddy: bail out of try_harder when alignment cannot be honoured

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 17, 2026

Description

A flaw was found in the Linux kernel's gpu/buddy subsystem. The try_harder memory allocation fallback mechanism could return a memory range whose starting offset did not match the required minimum block size. This incorrect memory alignment could lead to improper memory handling within the kernel, potentially causing system instability or unexpected behavior.

Statement

A moderate severity flaw was found in the Linux kernel's gpu/buddy GPU memory allocator. The try_harder contiguous-allocation fallback could return a memory range whose starting offset did not match the caller's requested min_block_size alignment, breaking the allocator's alignment contract. A local user able to reach the GPU memory allocation path could cause the GPU driver or hardware to operate on misaligned memory, which may lead to allocation failures, GPU faults or resets, and degraded graphics or compute availability. No impact on confidentiality or integrity has been demonstrated; Red Hat therefore rates this flaw Moderate (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), which is lower than the upstream CVEORG severity of Important (CVSS 7.8) that additionally assumes high confidentiality and integrity impact. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel streams are currently marked not affected because the vulnerable code is not present in these shipped kernels.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input