171 matches found
CVE-2023-52489 mm/sparsemem: fix race in accessing memory_section->usage
In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memorysection-usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that ZONENORMAL ZONEDEVICE ZONENORMAL...
CVE-2023-52489 mm/sparsemem: fix race in accessing memory_section->usage
In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memorysection-usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that ZONENORMAL ZONEDEVICE ZONENORMAL...
CVE-2023-52489
In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memorysection-usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that ZONENORMAL ZONEDEVICE ZONENORMAL...
kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h
A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...
PT-2024-8396
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the pfn to kaddr macro in the Linux kernel, which requires a 64-bit input value to prevent loss of valid address bits when shifting the input by PAGE SHIFT to...
kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h
A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...
kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h
A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...
kernel: KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...
UBUNTU-CVE-2023-4732
A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...
kernel: KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced trycmpxchguser to update guest PTE A/D bits instead of mapping the PTE into kernel address space. The VMPFNMAP path is broken as it assumes tha...
PT-2025-37677
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-eeac8ede1755+ Description A flaw exists in the Linux kernel's iommufd subsystem related to page frame number pfn list corruption during batch carry operations. Specifically, if batch-end is 0, setting...
PT-2023-9431 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the iommu/iova component of the Linux kernel, where there is a problem with the retry pfn overflowing in the alloc and insert iova range function. This occurs i...
PT-2022-36067 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns the KVM's handling of inactive gfn to pfn cache, where attempts to consume or refresh it are not properly rejected. The actual impact and attack plausibility have not yet...
GSD-2022-1005028 mm/mprotect: only reference swap pfn page if type match
mm/mprotect: only reference swap pfn page if type match This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap) a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.
...
PT-2022-14461
Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue allows userspace to potentially map the kernel area to be writable, which can be easily exploited. This is because the 'remap pfn range' function may map out of size kernel...
Android kernel Heap Buffer Overflow DoS
The vulnerability of the remappfnrange function in Android operating system kernels stems from the issue where the operation goes beyond the buffer boundaries in memory when processing the parameter vma-vmpageprot. Exploiting this vulnerability can allow a remote attacker to cause a service failu...
Google Android security vulnerabilities
Google Android is a Linux-based open source operating system from Google, Inc. A code execution vulnerability exists in Google Android, which is caused by kernel memory size mapping in remappfnrange. An attacker could exploit this vulnerability to execute arbitrary code on the system...
PT-2022-3961
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to the implementation of the remap pfn range function in the Android operating system kernel, which can lead to a buffer overflow in memory when processing the vma-vm...
GSD-2022-1003744 mm, compaction: fast_find_migrateblock() should return pfn in the target zone
mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...