Description
In the Linux kernel, the following vulnerability has been resolved:

mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE

If DAX memory is hotplugged into an unoccupied subsection of an early
section, section_activate() reuses the unoptimized boot memmap. However,
compound_nr_pages() still assumes that vmemmap optimization is in effect
and initializes only the reduced number of struct pages. As a result, the
remaining tail struct pages are left uninitialized, which can later lead
to unexpected behavior or crashes.

Fix this by treating early sections as unoptimized when calculating how
many struct pages to initialize.
Published: 2026-08-15
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel can leave certain struct pages uninitialized when DAX memory is hot‑plugged into an early subsection that has not been optimized by the boot memmap. The uninitialized tail pages can later be used in a way that causes the kernel to behave unpredictably or crash, resulting in a loss of availability for the affected system. This flaw is a classic case of a use‑of‑uninitialized‑memory weakness that can be triggered by the specific memory‑management scenario described.

Affected Systems

The fault affects the Linux kernel; the specific kernel versions are not listed in the advisory, so any kernel in which the early ZONE_DEVICE sections can be hot‑plugged DAX memory without the fix remains vulnerable. No product sub‑version information is provided, so the impact applies broadly to all kernel builds that include the unsupported hot‑plugging path.

Risk and Exploitability

No CVSS score is supplied and the EPSS score is unavailable, so a numerical severity assessment cannot be made. The vulnerability is not listed in CISA’s KEV catalog and there are no publicly reported exploits. However, a local privileged user or a compromised kernel process could trigger the hot‑plugging path and cause a crash, making the risk high for environments that enable DAX memory hot‑plugging. The lack of exploitation evidence reduces immediate threat, but the crash potential warrants timely remediation.

Generated by OpenCVE AI on August 15, 2026 at 09:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest kernel patch that marks early sections as unoptimized when initializing struct pages, as indicated by the commit references provided.
  • Upgrade to a kernel release that incorporates the fix, such as those following the commit 11f2826e9ee6f24aaa774e3dcd75abbe4b3091b6.
  • If hot‑plugging DAX memory is required, reconfigure the system to avoid hot‑plugs into early ZONE_DEVICE sections or disable the DAX hot‑plug feature until the patch is applied.

Generated by OpenCVE AI on August 15, 2026 at 09:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.
Title mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:53:37.795Z

Reserved: 2026-08-09T03:40:39.910Z

Link: CVE-2026-72172

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:35.353

Modified: 2026-08-15T06:21:35.353

Link: CVE-2026-72172

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T09:15:04Z

Weaknesses

No weakness.