HugeDirtyCowPOC

„Huge Dirty Cow“ POC Ein POC für die Huge-Dirty-Cow-Sicherheitslücke CVE-2017-1000405. Vollständige Details findest du hier. Stelle vor dem Ausführen sicher, dass transparent huge pages auf „always“ gesetzt sind: root@kitploit: echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

CVE-2023-2598

رفع الامتيازات عبر CVE-2023-2598 من خلال CVE-2023-2598 نفهم آليتي Compound Page وfolio في لينكس، ثم نرى لاحقًا ما إذا كان يمكن إتمام استغلال ثغرة اليوم الواحد 1day CVE-2023-6560 الصفحة المركبة Compound Page / huge page مع ازدياد الذاكرة حجمًا، ما زالت وحدة تخصيص الصفحات الأساسية في لينكس 4K، وهو ...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, and Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count The refcount may be unexpectedly increased through functions like trygetfolio, especially by calls such as splithugepages. In hugepmdunshare, we use the refcount to check wheth...

kernel: mm/huge_memory: update file PMD counter before folio_put()

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

Linux Distros Unpatched Vulnerability : CVE-2026-72175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series userfaultfd/pagemap: pre- existing fixes. These are pre-existing bug fixes that were carrie...

kernel: mm: thp: deny THP for files on anonymous inodes

A flaw was found in the Linux kernel's Transparent Huge Pages THP mechanism. This vulnerability occurs because the filethpenabled function incorrectly allows THP for files on anonymous inodes, which are not designed for this feature. An attacker could potentially exploit this by manipulating...

UBUNTU-CVE-2026-72175

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series "userfaultfd/pagemap: pre-existing fixes". These are pre-existing bug fixes that were carried at the front of the userfaultfd RWP working-set-tracking series up...

CVE-2026-72043

This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...

CVE-2026-68086

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

EUVD-2026-55552

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs. With userfaultfd access, you can register on the shadow stack, discard a page ... and inject a page with...

CVE-2026-68166

The CVE-2026-68166 issue in the Linux kernel is addressed by restricting userfaultfd registrations. The fix updates vma_can_userfault() to reject VM_SHADOW_STACK and VM_SPECIAL so that drivers implementing vm_uffd_ops cannot register special VMAs with userfaultfd. VM_SPECIAL’s inclusion of VM_DON...

CVE-2026-68166 userfaultfd: prevent registration of special VMAs

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs. With userfaultfd access, you can register on the shadow stack, discard a page ... and inject a page with...

Linux Distros Unpatched Vulnerability : CVE-2026-68086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 mm: fs: remove...

CVE-2026-64181

A flaw was found in the Linux kernel's memory management subsystem. On 32-bit x86 systems with Transparent Huge Pages THP enabled, a missing feature for handling special page table entries can lead to incorrect tracking of memory resources. This can result in system warnings, errors related to...

EUVD-2026-45866

In the Linux kernel, the following vulnerability has been resolved: mm: fix vmnormalpage to handle missing support for pmdspecial/pudspecial On x86 32-bit with THP enabled, zaphugepmd is seen to generate a "WARNING: mm/memory.c:735 at vmnormalpage+0x6a/0x7d", from the VMWARNONONCEiszeropfnpfn ||...

CVE-2026-64181

In the Linux kernel, the following vulnerability has been resolved: mm: fix vmnormalpage to handle missing support for pmdspecial/pudspecial On x86 32-bit with THP enabled, zaphugepmd is seen to generate a "WARNING: mm/memory.c:735 at vmnormalpage+0x6a/0x7d", from the VMWARNONONCEiszeropfnpfn ||...

CVE-2026-64181 mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()

In the Linux kernel, the following vulnerability has been resolved: mm: fix vmnormalpage to handle missing support for pmdspecial/pudspecial On x86 32-bit with THP enabled, zaphugepmd is seen to generate a "WARNING: mm/memory.c:735 at vmnormalpage+0x6a/0x7d", from the VMWARNONONCEiszeropfnpfn ||...

mm/hugetlb: restore reservation on error in hugetlb folio copy paths

...

CVE-2026-53189

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

CVE-2026-53207

A flaw was found in the Linux kernel's memory management, specifically concerning huge pages. When two concurrent memory poisoning operations madviseMADVHWPOISON occur on the same huge page while it is also being unmapped, a recursive spinlock self-deadlock can be triggered. This can lead to a...