The vulnerability of the gup_pud_range() function in the mm/gup.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the guppudrange function in the mm/gup.c module of the Linux kernel’s memory management subsystem is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of components of Linux operating system’s kernel, allowing a hacker to execute arbitrary code

The vulnerability of the mm/mglru components in the Linux operating system’s kernel is related to a countable loss of significance in the foliorotatereclaimable function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-21696: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: mm/vma: add giveuponoom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anonvma's, we report this so the caller can handle it...

Vulnerability of Linux operating system kernel’s mm/writeback components, allowing attackers to execute arbitrary code

The vulnerability of the mm/writeback components in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-57884: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttledirectreclaim The task sometimes continues looping in throttledirectreclaim because allowdirectreclaimpgdat keeps returning false. 0 ffff80002cb6f8d0 switchto...

CVE-2024-57886: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix new damontarget objects leaks on damoncommittargets Patch series "mm/damon/core: fix memory leaks and ignored inputs from damoncommitctx". Due to two bugs in damoncommittargets and damoncommitschemes, which are...

CVE-2024-57881: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...

PT-2025-3794 · Provision Isr · Provision-Isr Sh-16200A-2 +5

Name of the Vulnerable Software and Affected Versions: Provision-ISR SH-4050A-2 Provision-ISR SH-4100A-2LMM Provision-ISR SH-8100A-2LMM Provision-ISR SH-16200A-21U Provision-ISR SH-16200A-51U Provision-ISR NVR5-8200PX up to 20241220 Description: A vulnerability was found in Provision-ISR devices,...

CVE-2025-0224: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2LMM, SH-8100A-2LMM, SH-16200A-21U, SH-16200A-51U and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to...

Provision-ISR多款产品 访问控制错误漏洞

Provision-ISR SH-4050A-2 and others are a high quality dynamic hybrid digital video recorder from Provision-ISR. An access control error vulnerability exists in various Provision-ISR products. An attacker could exploit the vulnerability to disclose sensitive information. The following products ar...

PT-2025-30796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of anonymous inodes and security contexts. A regression existed where the S PRIVATE flag was not cleared after allocating anonymo...

CVE-2024-56678: Use After Free

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copyfromkernelnofault can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copyfromkernelnofault can cause page...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates from an error in the kfence page in the powerpc/mm/fault module...

DEBIAN-CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

CVE-2024-56566

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid list corruption when removing a slab from the full list Boot with slubdebug=UFPZ. If allocated object failed in allocconsistencychecks, all objects of the slab will be marked as used, and then the slab will be...

CVE-2024-56566: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid list corruption when removing a slab from the full list Boot with slubdebug=UFPZ. If allocated object failed in allocconsistencychecks, all objects of the slab will be marked as used, and then the slab will be...

CVE-2024-56559: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...

CVE-2024-56612: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: mm/gup: handle NULL pages in unpinuserpages The recent addition of "pofs" pages or folios handling to gup has a flaw: it assumes that unpinuserpages handles NULL pages in the pages array. That's not the case, as I discovered when...