Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053389 advisory. In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987068 advisory. In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcgwriteeventcontrol memcgwriteeventcontrol accesses the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: memcgwriteeventcontrol: fixed a user-triggered oops. We do not guarantee that anything beyond the terminating NUL is mapped let alone initialized with anything sensible...

The vulnerability of the memcg_write_event_control() function in the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memcgwriteeventcontrol function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

DEBIAN-CVE-2022-48988

In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcgwriteeventcontrol memcgwriteeventcontrol accesses the dentry-dname of the specified control fd to route the write call. As a cgroup interface file can't be renamed, it's safe to access...

memcg_write_event_control(): fix a user-triggerable oops

...

SUSE CVE-2024-45021

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

AZL-49242 CVE-2024-45021 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

AZL-49170 CVE-2024-45021 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

UBUNTU-CVE-2024-45021

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

PT-2024-31375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A user-triggerable issue has been resolved in the Linux kernel, specifically in the memcg write event control function. The problem arises because it is not guaranteed that anything past...

kernel: memcg: fix possible use-after-free in memcg_write_event_control()

A flaw was found in the Linux kernel's memory cgroup memcg component. A missing file type check in the memcgwriteeventcontrol function allows arbitrary files to bypass validation. This can lead to a use-after-free condition when dname and parent accesses race against file renames and removals. A...

PT-2023-33360

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.14 through 5.4.226 Description A potential issue exists in the memcg write event control function, which may lead to a use-after-free scenario. The actual impact and attack plausibility have not yet been proven...

PT-2023-33299 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.10.158 Description: The issue is related to a possible use-after-free in the memcg write event control function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-7690

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 347c4a874710 Description The issue is related to a possible use-after-free in the memcg write event control function. This function accesses the dentry-d name of the specified control file descriptor to route the...

PT-2022-14407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the ioctl dpm qos update and ioctl event control set functions, which could lead to a local escalation of privilege. System execution privileges are needed for...

CVE-2015-2098

Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the 1 Connect, 2 ConnectEx, or 3 ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; 4 AudioOnlySiteChannel function in the...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3914-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...