Lucene search
+L

330 matches found

OSV
OSV
added 2023/03/07 2:42 p.m.12 views

GSD-2023-1002402 aio: fix mremap after fork null-deref

aio: fix mremap after fork null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit 4326d0080f7e84fba775da41d158f46cf9d3f1c...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/03/07 2:37 p.m.15 views

GSD-2023-1002352 aio: fix mremap after fork null-deref

aio: fix mremap after fork null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit 178993157e8c50aef7f35d7d6d3b44bb428199e...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.2 views

PT-2023-35477 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 5.4.231 Description: The issue is related to a null-deref in mremap after fork. It was introduced in version 3.19 and fixed in version 5.4.232. The actual impact and attack plausibility have not yet been...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.7 views

PT-2023-35427 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: The issue is related to a null-deref in the mremap function after a fork operation. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.5 views

PT-2023-35390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a null-deref in the mremap function after a fork operation. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.7 views

PT-2023-7122 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap,...

7.9CVSS6.5AI score0.0788EPSS
SaveExploits15References39
F5 Networks
F5 Networks
added 2023/02/21 6:7 p.m.64 views

K36462841: Linux kernel vulnerability CVE-2018-18281

Security Advisory Description Since Linux kernel version 3.2, the mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the pagetables of a task that is in the middle of mremap, a stale TLB entry can remain for a short time that...

7.8CVSS6.7AI score0.01061EPSS
SaveExploits2Affected Software16
RedHat Linux
RedHat Linux
added 2023/02/21 9:26 a.m.6 views

kernel: mm/mremap.c use-after-free vulnerability

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS6.7AI score0.0045EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/02/21 9:1 a.m.12 views

kernel: mm/mremap.c use-after-free vulnerability

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS6.7AI score0.0045EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.3 views

SUSE CVE-2003-0985

The mremap system call domremap in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area VMA to create...

7.2CVSS6.9AI score0.01233EPSS
SaveExploits6References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.5 views

SUSE CVE-2004-0077

The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...

7.2CVSS7AI score0.02434EPSS
SaveExploits4References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.4 views

SUSE CVE-2010-0291

The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service panic by calling the 1 mmap or 2 mremap function, aka the "domremap mess" or "mremap/mmap mess."...

4.6CVSS6.8AI score0.00433EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:52 a.m.4 views

SUSE CVE-2011-2496

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

4.9CVSS6.3AI score0.00487EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.6 views

SUSE CVE-2018-18281

Since Linux kernel version 3.2, the mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the pagetables of a task that is in the middle of mremap, a stale TLB entry can remain for a short time that permits access to a physical pag...

5.6CVSS7.5AI score0.01061EPSS
SaveExploits2References19
SUSE CVE
SUSE CVE
added 2023/02/15 4:0 a.m.4 views

SUSE CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

8.4CVSS6.3AI score0.00992EPSS
SaveExploits1References32
OSV
OSV
added 2023/02/01 12:0 a.m.32 views

ASB-A-248354871

In movepagetables of mremap.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS7.4AI score0.0045EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/11/09 12:0 a.m.33 views

SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-good (SUSE-SU-2022:3906-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3906-1 advisory. - CVE-2022-1920: Fixed an integer overflow while parsing matroska files bsc1201688. - CVE-2022-1921: Fixed an...

7.8CVSS7.3AI score0.00497EPSS
SaveExploits7References22
RedhatCVE
RedhatCVE
added 2022/10/31 12:12 p.m.32 views

CVE-2022-41222

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS3AI score0.0045EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/21 8:15 a.m.4 views

DEBIAN-CVE-2022-41222

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move...

7CVSS6.4AI score0.0045EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/21 8:15 a.m.22 views

UBUNTU-CVE-2022-41222

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move...

7CVSS6.7AI score0.0045EPSS
SaveExploits1References10
Rows per page
Query Builder