CVE-2024-27406

CVE-2024-27406 refers to a Linux kernel issue where the iov_iter unit test (TEST_IOV_ITER) incorrectly depended on MMU, causing a crash on nommu systems (e.g., qemu kc705-nommu) when vmap() is invoked. The root cause is that vmap() is not supported on nommu, leading to a kernel panic. The vulnera...

CVE-2024-27406 lib/Kconfig.debug: TEST_IOV_ITER depends on MMU

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 Subtest: ioviter module: kunitioviter 1..9 BUG: failure...

CVE-2024-27406: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU Trying to run the ioviter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 Subtest: ioviter module: kunitioviter 1..9 BUG: failure...

PT-2024-8425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where the iov iter unit test causes a crash on nommu systems, such as the qemu kc705-nommu emulation. The test calls the vmap function directly,...

PT-2024-14727

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2-00001-g328a1f96f7b9 34 Description The issue is related to the Linux kernel's VMAP STACK overflow detection. When an overflow is detected, the CPU switches to a shadow stack temporarily before switching...

SUSE CVE-2017-5547

drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual page...

SUSE CVE-2017-5548

drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual...

SUSE CVE-2017-8061

drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging us...

SUSE CVE-2017-8062

drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more...

SUSE CVE-2017-8065

crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

SUSE CVE-2017-8068

drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

SUSE CVE-2017-8069

drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

SUSE CVE-2017-8070

drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual page f...

GSD-2023-1001222 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP

pstore: Avoid kcore oops by vmaping with VMIOREMAP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000163 riscv: fix race when vmap stack overflow

riscv: fix race when vmap stack overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

PT-2023-34594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the pstore, which can cause a kcore oops by vmaping with VM IOREMAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33144 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a race condition that occurs when there is a vmap stack overflow. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v6.0.12. The actua...

PT-2023-34299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the pstore, which can cause a kcore oops by vmaping with VM IOREMAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2023-33927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the pstore, which can cause a kcore oops by vmaping with VM IOREMAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2023-34732

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.4 through 4.9.336 Description The issue is related to the pstore, which can cause a kcore oops by vmaping with VM IOREMAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...