1822 matches found
CVE-2026-72213 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...
EUVD-2026-58971
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...
CVE-2026-72213 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...
CVE-2026-72213
CVE-2026-72213 affects the Linux kernel hugetlb code path. The issue arises from using a single h_cg pointer for both rsvd and non-rsvd cgroup charges in alloc_hugetlb_folio(), causing the rsvd pointer to be overwritten and leading to a page_counter underflow during folio cleanup. The fix introdu...
CVE-2026-72010 cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOLFRELATIVENODES rebinds in response to a CPU hotplug event...
CVE-2026-72010: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOLFRELATIVENODES rebinds in response to a CPU hotplug event...
PT-2026-72771
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the bpf task from vpid function. This happens when cgroup skb programs run in softirq and interrupt a task that is currently executing do exit. If th...
PT-2026-72807
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs when BPF PROG QUERY unconditionally writes the query.revision field back to userspace. This happens if the userspace provides a bpf attr structure that is...
PT-2026-72774
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where sleepable BPF programs can be attached to the LSM cgroup. Because the cgroup shim operates under rcu read lock dont migrate, attaching sleepable BPF programs in thi...
PT-2026-72778
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init...
CVE-2026-74342: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 "simpexattr: use per-sb cache", kernfsxattrset and kernfsxattrget compute the cache via kernfsrootkn before any other check. kernfsrootkn walks...
Linux Distros Unpatched Vulnerability : CVE-2026-74338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs...
PT-2026-72741
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding cgroup storage cookie checks for program arrays. The compatibility check incorrectly treats programs without cgroup...
Linux Distros Unpatched Vulnerability : CVE-2026-74342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 simpexattr: use per-sb cache, kernfsxattrset and kernfsxattrget compute the cac...
CVE-2026-74305: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...
CVE-2026-74371: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-72213: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...
PT-2026-72401
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch occurs in the hugetlb cgroup charge and uncharge process. In the alloc hugetlb folio function, a single h cg pointer is used for both reserved rsvd and non-reserved hugetlb...
