CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: update VMA end correctly on merge Vulnerability discovered by Antonius / Blue Dragon Security Overview Field| Detail ---|--- CVE ID| CVE-2026-23416 Subsystem| mm/mseal — mm/vma.c Affected| Linux kernel 6.17 through 7.0-rc5 Fixed in| Linux 7.0-rc6, stable backports...

CVE-2018-17182

CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...

cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock during shstk sigreturn During sigreturn, the shadow stack signal frame is popped. The kernel does this by reading the shadow stack using normal read accesses. When it cannot assume the memory is the...

CVE-2026-98514

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validateinit On the ttmboreserve failure and "vma not found" error paths, the loop breaks without adding the looked-up object to any validate list, so the reference taken by drmgemobjectlook...

CVE-2026-98514 drm/nouveau: Fix gem reference leak in validate_init()

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validateinit On the ttmboreserve failure and "vma not found" error paths, the loop breaks without adding the looked-up object to any validate list, so the reference taken by drmgemobjectlook...

CVE-2026-98507

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anonvma init and vma-anonvma publish On arm64 server, we find that a task trying to grab the anonvma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds. Tainted:...

PT-2026-116726

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.0-0021.aarch64 Description A race condition exists in the memory management subsystem when handling anonymous virtual memory areas anon vma. The issue occurs when the anon vma prepare function allocates and initialize...

PT-2026-128553

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon vma init and vma-anon vma publish On arm64 server, we find that a task trying to grab the anon vma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds...

PT-2026-116733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the validate init function within the drm/nouveau component. When a ttm bo reserve failure or a "vma not found" error occurs, the loop terminates without addin...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace performs a partial munmap on a privcmd mapping, the kernel splits the VMA via splitvma. Sinc...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Binder: Fix use-after-free in Shinker’s callback The mmap read lock is utilized during the shrinker’s callback; consequently, using the alloc-vma pointer is unsafe, as it may race with munmap. Starting from commit dd2283f2605e “m...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uaccevmops to return -EPERM The current uaccevmops does not support the mremap operation of vmoperationsstruct. Implement .mremap to return -EPERM to remind users. The reason we need to explicitly disab...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VMPAT handling in COW mappings PAT handling fails to perform correctly in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults to point to anonymous folios. Reliably retrieving the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Fork: Defer linking of vma until vma is fully initialized. Thorvald reported a WARNING 1. The root cause of the issue lies in a race condition: - CPU 1: fork; - fork: Calls hugetlbfsfallocate. - dupmmap: Calls hugetlbfspunchhole....

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: Binder: Fix UAF of alloc-vma in race with munmap cmllamas: Clean forward port from commit 015ac18be7de “Binder: fix UAF of alloc-vma in race with munmap” in 5.10 stable. It is needed in mainline after the revert of commit...

SUSE CVE-2026-98224

In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmapprepare failure mmapsetup accounts memory for relevant mappings via: securityvmenoughmemorymm - vmenoughmemory - vmacctmemory If mmapsetup fails, this indicates that this accounting did not take...

Linux Distros Unpatched Vulnerability : CVE-2026-98224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmapprepare failure mmapsetup accounts memory for relevant...

CVE-2026-98224

In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmapprepare failure mmapsetup accounts memory for relevant mappings via: securityvmenoughmemorymm - vmenoughmemory - vmacctmemory If mmapsetup fails, this indicates that this accounting did not take...