CVE intelligence

CVE-2026-72168

Vulnerability intelligence

Published Aug 15, 2026Sources checked Oct 8, 2026

N/ACVSS not listedScore unavailable

What this means

Review the available evidence

CVE-2026-72168. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

CISA KEVNot listedBased on the latest collected catalog

EPSS0.2%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-72168?

In the Linux kernel, the following vulnerability has been resolved:

mtd: maps: vmu-flash: fix fault in unaligned fixup

Use kzalloc_obj() / kzalloc_objs() to allocate the memcard structs, instead of kmalloc_obj() / kmalloc_objs() to prevent access to uninitialized data.

Fixes runtime error: Fault in unaligned fixup: 0000 [#1] at mtd_get_fact_prot_info.

Source: NVD