Lucene search
K

3426 matches found

Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.0 views

PT-2026-30159

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the btrfs subsystem related to how it handles logging of directory entries dentries when a conflicting inode is encountered. Specifically, when...

5.5CVSS5.4AI score0.00015EPSS
Exploits0References18
SUSE CVE
SUSE CVE
added 2026/04/02 8:39 a.m.5 views

SUSE CVE-2026-23410

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...

6.4CVSS5.7AI score0.00007EPSS
Exploits0References21
SUSE CVE
SUSE CVE
added 2026/04/02 8:39 a.m.3 views

SUSE CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

6.4CVSS5.7AI score0.00008EPSS
Exploits0References22
EUVD
EUVD
added 2026/04/01 9:31 a.m.2 views

EUVD-2026-17843

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

5.7AI score0.00008EPSS
Exploits0References6
NVD
NVD
added 2026/04/01 9:16 a.m.1 views

CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

7.8CVSS0.00008EPSS
Exploits0References8
OSV
OSV
added 2026/04/01 9:16 a.m.1 views

UBUNTU-CVE-2026-23410

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...

7.8CVSS5.7AI score0.00007EPSS
Exploits0References18
Cvelist
Cvelist
added 2026/04/01 8:36 a.m.31 views

CVE-2026-23411 apparmor: fix race between freeing data and fs accessing it

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

7.8CVSS0.00008EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/01 8:36 a.m.2 views

CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

7.8CVSS5.7AI score0.00008EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2026/04/01 8:36 a.m.10 views

CVE-2026-23411

CVE-2026-23411 corresponds to a Linux kernel AppArmor race condition: freeing i_private data can race with filesystem access because the inode may outlive references. The issue is resolved by moving the put of i_private referenced data to the correct place during inode eviction. Affects AppArmor ...

7.8CVSS5.7AI score0.00008EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2026/04/01 8:36 a.m.19 views

CVE-2026-23410

CVE-2026-23410 – Linux kernel (AppArmor) race condition has a documented use-after-free in rawdata handling. The issue occurs when rawdata inodes aren’t refcounted, allowing an attacker to open a rawdata file while the last reference is removed (e.g., via profile removal), freeing the aa_loaddata...

7.8CVSS5.7AI score0.00007EPSS
Exploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.3 views

PT-2026-29494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's AppArmor component contained a race condition between freeing data and filesystem access to it. AppArmor was releasing the reference to i private data after removing t...

7.8CVSS6.7AI score0.00008EPSS
Exploits0
OSV
OSV
added 2026/04/01 12:0 a.m.0 views

UBUNTU-CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

7.8CVSS5.7AI score0.00008EPSS
Exploits0References18
SUSE CVE
SUSE CVE
added 2026/03/25 4:55 p.m.4 views

SUSE CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

5.5CVSS5.7AI score0.00021EPSS
Exploits0References5
EUVD
EUVD
added 2026/03/25 12:30 p.m.2 views

EUVD-2026-15365

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

5.7AI score0.00021EPSS
Exploits0References5
NVD
NVD
added 2026/03/25 11:16 a.m.2 views

CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

5.5CVSS0.00021EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/03/25 11:16 a.m.2 views

CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

5.5CVSS5.7AI score0.00021EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/25 10:27 a.m.20 views

CVE-2026-23375 mm: thp: deny THP for files on anonymous inodes

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

0.00021EPSS
Exploits0References4
CVE
CVE
added 2026/03/25 10:27 a.m.9 views

CVE-2026-23375

CVE-2026-23375 (Linux kernel THP for anonymous inodes) – concrete details in connected docs : The issue arises from file_thp_enabled() incorrectly allowing/thp collapse for anonymous inodes created via alloc_file_pseudo() (e.g., guest_memfd, secretmem), enabling khugepaged/MADV_COLLAPSE exploits ...

5.5CVSS5.7AI score0.00021EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/03/25 10:27 a.m.2 views

CVE-2026-23375 mm: thp: deny THP for files on anonymous inodes

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

5.5CVSS5.7AI score0.00021EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a function error in the filethpenabled function that allows anonymous inode files to use THP, potential...

5.5CVSS6AI score0.00021EPSS
Exploits0References5
Rows per page
Query Builder