CVE-2026-72180

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the change non present huge pmd() function rewrites a writable device-private PMD swap entry into a readable one without preserving the pmd swp uffd wp() state. This occurs during a device-private PMD downgrade. Consequently, performing an mprotect() operation over a UFFD WP-marked device-private Transparent Huge Page (THP) strips the bit, allowing the trap to be bypassed during swap-in.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.