CVE-2026-72043

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the LoongArch architecture when the hardware page table walker (PTW) is enabled. The CPU may set the PAGE DIRTY bit directly in the page table entry during a write TLB miss, bypassing the software TLB store handler. This results in a state where the hardware recognizes a page as dirty, but the software-only PAGE MODIFIED bit remains clear. When fork() or clone() triggers copy-on-write, the pte wrprotect() function clears both PAGE WRITE and PAGE DIRTY bits. Because PAGE MODIFIED was not set, the information that the page was dirty is lost. Consequently, during page reclaim under memory pressure, functions such as page mkclean() or try to unmap() may incorrectly identify the page as clean, leading to the page being freed without writeback and causing data corruption. This behavior affects the pte wrprotect() and pmd wrprotect() functions, the latter of which handles cases involving CONFIG TRANSPARENT HUGEPAGE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.