In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing in error path In create_altmaps_and_memory_blocks(), when arch_add_memory() succeeds with memmap_on_memory enabled, the vmemmap pages are allocated from params.altmap. If create_memory_block_devices() subsequently fails, the error path calls arch_remove_memory() with a NULL altmap instead of params.altmap. This is a bug that could lead to memory corruption. Since altmap is NULL, vmemmap_free() falls back to freeing the vmemmap pages into the system buddy allocator via free_pages() instead of the altmap. arch_remove_memory() then immediately destroys the physical linear mapping for this memory. This injects unowned pages into the buddy allocator, causing machine checks or memory corruption if the system later attempts to allocate and use those freed pages. Fix this by passing params.altmap to arch_remove_memory() in the error path.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect
    altmap passing in error path In create_altmaps_and_memory_blocks(), when arch_add_memory() succeeds with
    memmap_on_memory enabled, the vmemmap pages are allocated from params.altmap. If
    create_memory_block_devices() subsequently fails, the error path calls arch_remove_memory() with a NULL
    altmap instead of params.altmap. This is a bug that could lead to memory corruption. Since altmap is NULL,
    vmemmap_free() falls back to freeing the vmemmap pages into the system buddy allocator via free_pages()
    instead of the altmap. arch_remove_memory() then immediately destroys the physical linear mapping for this
    memory. This injects unowned pages into the buddy allocator, causing machine checks or memory corruption
    if the system later attempts to allocate and use those freed pages. Fix this by passing params.altmap to
    arch_remove_memory() in the error path. (CVE-2026-72212)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/memory_hotplug: fix incorrect altmap passing in error path In create_altmaps_and_memory_blocks(), when     arch_add_memory() succeeds with memmap_on_memory enabled, the vmemmap pages are allocated from     params.altmap. If create_memory_block_devices() subsequently fails, the error path calls     arch_remove_memory() with a NULL altmap instead of params.altmap. This is a bug that could lead to memory     corruption. Since altmap is NULL, vmemmap_free() falls back to freeing the vmemmap pages into the system     buddy allocator via free_pages() instead of the altmap. arch_remove_memory() then immediately destroys the     physical linear mapping for this memory. This injects unowned pages into the buddy allocator, causing     machine checks or memory corruption if the system later attempts to allocate and use those freed pages.
    Fix this by passing params.altmap to arch_remove_memory() in the error path. (CVE-2026-72212)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Type	Severity
471015	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Cloud Security	Google COS Security Checks	Local	high
471015	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
469870	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.448.8	Tenable Cloud Security	Google COS Security Checks	Local	high
469870	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.448.8	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
468744	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19216.655.6	Tenable Cloud Security	Google COS Security Checks	Local	high
468744	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19216.655.6	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
343049	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	Nessus	Oracle Linux Local Security Checks	Local	high
341880	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	Nessus	Amazon Linux Local Security Checks	Local	high
337833	Linux Distros Unpatched Vulnerability : CVE-2026-72212	Nessus	Misc.	Local	high
337239	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2057)	Nessus	Amazon Linux Local Security Checks	Local	high
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-72212

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high