CVE-2026-24225

NVIDIA DGX Spark is affected by an out-of-bounds read in the standalone MM firmware , which could allow an attacker with local and high privileges to cause information disclosure . The CVSS v3.1 score is 6.0 (MEDIUM) with a changed scope and high confidentiality impact. No in-the-wild exploitatio...

PT-2026-81384

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

The vulnerability of the filemap_map_pages() function in the mm/filemap.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filemapmappages function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the vma_merge_new_range() function in the mm/vma.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vmamergenewrange function in the mm/vma.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerabilities of the functions damon_stat_start() and damon_stat_stop() in the mm/damon/stat.c module of the Linux kernel’s memory management subsystem allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damonstatstart and damonstatstop functions in the mm/damon/stat.c module, a memory-management subsystem of the Linux operating system, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the cgwb_release_workfn() function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cgwbreleaseworkfn function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-24225: Out-of-bounds Read

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

The vulnerability of the `swapoff` system call in the `mm/swapfile.c` module of the Linux kernel’s memory management subsystem allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the swapoff system call in the mm/swapfile.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information or...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Unbounded recursion in the free path has been prevented using a new kmalloc type. Commit 280ea9c3154b “mm/slab: Avoid allocating the slabobjext array from its own slab” prevents recursive allocation of objexts from kmall...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damoncommittarget puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target pid...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: Proper handling of freepagesprepare has been implemented in compactionfree. freepagesprepare may fail, but compactionfree does not handle this failure case. Pages that fail should not be added back to cc-freepages...

CVE-2026-74632

A flaw was found in the Linux kernel's memory management mm/hugememory. A race condition can occur between a memory shrinker and a concurrent page fault when handling huge zero pages. This race can lead to the hugezeropfn being incorrectly set, causing the huge zero page to be misidentified as an...

The vulnerability of the mm/shmem component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/shmem component in Linux kernel relates to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the mm/shmem.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the mm/shmem.c component of the Linux operating system involves executing a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-74599

In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using initmm Previous commits have established the invariant that kernel page table freeing is performed while an mmap read lock on initmm is held, which fixes races between...

SUSE CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

AZL-97292 CVE-2026-74672 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-74632

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix hugezeropfn race Patch series "mm/hugememory: fix hugezeropfn race", v2. There is a subtle race in the reference-counted hugezerofolio implementation. The fast path atomic logic fails to account for the fact th...

AZL-97130 CVE-2026-74632 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix hugezeropfn race Patch series "mm/hugememory: fix hugezeropfn race", v2. There is a subtle race in the reference-counted hugezerofolio implementation. The fast path atomic logic fails to account for the fact th...