vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-72066

cpu: hotplug: Bound hotplug states sysfs output

HIGH
7.8
CVSS Score
Published: August 15, 2026 at 05:52 AM UTC
Updated: October 19, 2026 at 10:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.698f8cdce1db580b99fce823a48eea2cb2bdb261e
Vendor states this is fixed in 2408be459c70ef4250da1a9e50f5478e6b250d61 (fixed)
Vendor states this is fixed in 27481cf4365a6ff5c9be3590143e7ed434000266 (fixed)
Vendor states this is fixed in 61a73a123ac7a7fbc57382531f8cb7092d569aba (fixed)
Vendor states this is fixed in 631d53102da9f469c96b882b770336bec095b833 (fixed)
Vendor states this is fixed in 6cb15b81ff545840048fb0e1a6e827d560dbf367 (fixed)
Vendor states this is fixed in 86f436567f2516a0083b210bedc933544826a2c3 (fixed)
Vendor states this is fixed in 998f66e9ce320f3433f60b948e3698b744754a46 (fixed)
Vendor states this is fixed in de4d3d8ae17dc8b4cf8c59436c4b7e2dc2491635 (fixed)
Vendor states this is fixed in 4.6 (unaffected)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/2408be459c70ef4250da1a9e50f5478e6b250d61
Source: cverecord
https://git.kernel.org/stable/c/de4d3d8ae17dc8b4cf8c59436c4b7e2dc2491635
Source: cverecord
https://git.kernel.org/stable/c/998f66e9ce320f3433f60b948e3698b744754a46
Source: cverecord
https://git.kernel.org/stable/c/61a73a123ac7a7fbc57382531f8cb7092d569aba
Source: cverecord
https://git.kernel.org/stable/c/6cb15b81ff545840048fb0e1a6e827d560dbf367
Source: cverecord
https://git.kernel.org/stable/c/631d53102da9f469c96b882b770336bec095b833
Source: cverecord
https://git.kernel.org/stable/c/86f436567f2516a0083b210bedc933544826a2c3
Source: cverecord
https://git.kernel.org/stable/c/27481cf4365a6ff5c9be3590143e7ed434000266

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED
CWE
CWE-120

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card