85 matches found
CVE-2023-4611
A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...
kernel: mm/mempolicy: fix mpol_new leak in shared_policy_replace
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...
SUSE CVE-2005-3358
Linux kernel before 2.6.15 allows local users to cause a denial of service panic via a setmempolicy call with a 0 bitmask, which causes a panic when a page fault occurs...
SUSE CVE-2006-0557
sysmbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the getnodes function, which has unknown impact and attack vectors...
SUSE CVE-2007-4130
The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux RHEL 4 on Itanium ia64 does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service panic via invalid arguments to setmempolicy in an MPOLBIND operation...
CVE-2022-23813
The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment...
PT-2023-1482 · Amd · Amd System Management Unit +1
Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP and System Management Unit SMU affected versions not specified Description: The issue is related to the software interfaces of ASP and SMU, which may not properly enforce the SNP memory security policy. This could lea...
GSD-2022-1001007 mm/mempolicy: fix mpol_new leak in shared_policy_replace
mm/mempolicy: fix mpolnew leak in sharedpolicyreplace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...
kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c
An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...
kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c
An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...
An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user so triggering the bug does not grant any powers not already held.”
...
The vulnerability of the mpol_parse_str function in the Linux operating system’s kernel allows a hacker to trigger a service failure or increase their privileges.
The vulnerability of the mpolparsestr function mm/mempolicy.c in the Linux operating system is related to writing beyond the buffer boundaries on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...
UBUNTU-CVE-2020-11565
An issue was discovered in the Linux kernel through 5.6.2. mpolparsestr in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability...
kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact
The dogetmempolicy function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service DoS or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out...
kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact
The dogetmempolicy function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service DoS or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out...
kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c
Incorrect error handling in the setmempolicy and mbind compat syscalls in 'mm/mempolicy.c' in the Linux kernel allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...
DEBIAN-CVE-2018-10675
The dogetmempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via crafted system calls...
USN-3406-1 linux vulnerabilities
It was discovered that an out of bounds read vulnerability existed in the associative array implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash or expose sensitive information. CVE-2016-7914 It was discovered that a NULL pointer dereferenc...
USN-3291-3 linux-lts-xenial vulnerabilities
USN-3291-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Dmitry Vyukov discovered that the generic SCSI sg subsystem in the Linux kernel...
DEBIAN-CVE-2017-7616
Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...