CVE-2026-72066

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CPU hotplug component where the states show() function uses sprintf() to add CPU hotplug state names into a single sysfs buffer. If a sufficient number of states are registered, the process can write beyond the end of the PAGE SIZE buffer, leading to a buffer overflow. A buffer overflow occurs when a program writes more data to a block of memory than it is allocated to hold.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.