Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002940 advisory. A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003433 advisory. A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003021 advisory. The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO ioctl calls, as demonstrated by allowing local users to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000426 advisory. The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO ioctl calls, as demonstrated by allowing local users to...

The vulnerability of the userfaultfd_writeprotect() function in the fs/userfaultfd.c module of the Linux file system support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the userfaultfdwriteprotect function in the fs/userfaultfd.c module of the Linux file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the mm/userfaultfd component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the mm/userfaultfd component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the mm/userfaultfd.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mm/userfaultfd.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the mfill_atomic() function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: mm: clear uffd-wp PTE/PMD state on mremap()

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...

kernel: mm: clear uffd-wp PTE/PMD state on mremap()

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: A crash occurred during UFFDIOMOVE when PMD is a migration entry. When UFFDIOMOVE encounters a migration PMD entry, it proceeds with obtaining a folio and accessing it, even though the entry type is swpentryt. Add a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race between userfaultfdmove and swap cache. This commit fixes two types of races, and their outcomes may differ: Barry reported a BUGON in commit c50f8e6053b0; we might see the same BUGON if the filemap look...

SUSE CVE-2025-40040

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

AZL-78386 CVE-2025-40040 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

CVE-2025-40040

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

AZL-68870 CVE-2025-40040 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

UBUNTU-CVE-2025-40040

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

CVE-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

EUVD-2025-36488

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

CVE-2025-40040

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...