ZeroDay Findings
Sign inSign up

Findings

CVE-2026-72066

cpu: hotplug: Bound hotplug states sysfs output

Published Aug 15, 2026 · updated Oct 14, 2026

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 15, 2026 · OSV.dev

    Detected

    In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.

  2. Oct 14, 2026 · OSV.dev

    Fix available

    Kernel fixed in 5.10.265

  3. Oct 14, 2026 · OSV.dev

    Fix available

    Kernel fixed in 5.10.265

  4. Oct 14, 2026 · OSV.dev

    Updated

    In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.

Affected

  • Linux Kernel4.6.0 → 5.10.265

Sources

References