80 matches found
CVE-2026-74605
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...
UBUNTU-CVE-2026-74606
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...
CVE-2026-74606
CVE-2026-74606 is a use-after-free vulnerability in the Linux kernel's eventfs component, specifically in eventfs_remove_rec(). When this function recursively removes a child entry, it subsequently reads list.next from that child via list_for_each_entry(). If free_ei() drops the final reference a...
CVE-2026-74605
A race condition in the Linux kernel's eventfs component occurs when an eventfs inode is freed. The ei->list field is a union with the RCU list head, and during SRCU-protected list iteration (without holding eventfs_mutex), a concurrent iterator may read the RCU head instead of the children li...
EUVD-2026-64543
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...
EUVD-2026-64542
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...
CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec()
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...
CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...
CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec()
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...
CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...
PT-2026-79611
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs remove rec eventfs remove rec recursively removes the child at the current loop position. After the recursive call returns, list for each entry advances by reading list.next from the removed...
PT-2026-79610
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-is freed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. A...
Linux Distros Unpatched Vulnerability : CVE-2026-74605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the...
Linux Distros Unpatched Vulnerability : CVE-2026-74606
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: eventfs: It was necessary to hold the eventfsmutex and SRCU when remounting events. The commit 340f0c7067a9 “eventfs: Update all the eventfsinodes from the events descriptor” had eventfsset attrs recursively traversing ei-childre...
eventfs: Hold eventfs_mutex and SRCU when remount walks events
...
SUSE CVE-2026-46106
In the Linux kernel, the following vulnerability has been resolved: eventfs: Hold eventfsmutex and SRCU when remount walks events Commit 340f0c7067a9 "eventfs: Update all the eventfsinodes from the events descriptor" had eventfssetattrs recurse through ei-children on remount. The walk only holds...
Linux Distros Unpatched Vulnerability : CVE-2026-46106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Hold eventfsmutex and SRCU when remount walks events Commit 340f0c7067a9 eventfs: Update all the eventfsinodes from the events descriptor had...
CVE-2026-46106
A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to trigger a race condition during remount operations. By exploiting insufficient locking mechanisms when processing event descriptors, an attacker can cause memory corruption, leading to a denial...
EUVD-2026-32865
In the Linux kernel, the following vulnerability has been resolved: eventfs: Hold eventfsmutex and SRCU when remount walks events Commit 340f0c7067a9 "eventfs: Update all the eventfsinodes from the events descriptor" had eventfssetattrs recurse through ei-children on remount. The walk only holds...