HugeDirtyCowPOC

"Huge Dirty Cow" POC Huge Dirty Cow脆弱性（CVE-2017-1000405）のPOCです。詳細はこちらをご覧ください。 実行する前に、transparent huge pagesを"always"に設定してください: echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

CVE-2023-2598

CVE-2023-2598 権限昇格 CVE-2023-2598を通じてLinuxのCompound Pageとfolioメカニズムを理解し、その後1dayのCVE-2023-6560を利用できるか検討する。 Compound Page huge page メモリは増え続けているが、Linuxの基本ページ割り当て単位は4Kのままであり、不足が生じている。そのため、複合ページ（Compound...

CVE-2026-97945

A flaw was found in the Linux kernel. A local user can cause silent data loss or data corruption due to improper memory tracking in the x86 memory management subsystem. When modifying permissions on transparent huge pages a mechanism that optimizes memory by grouping it into larger blocks, the...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: mm,hugetlb: Take the hugetlblock before decrementing h-resvhugepages. The h-hugepages counters are protected by the hugetlblock, but allochugepage has a corner-case scenario where it can decrement the counter outside of the lock...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count The refcount may be unexpectedly increased through functions like trygetfolio, especially when called by functions like splithugepages. In hugepmdunshare, we use the refcount t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mm/hugetlb: fixed DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio When I conducted memory failure tests recently, the following warning occurred: DEBUGLOCKSWARNON1 WARNING: CPU: 8 PID: 1011 at kernel/locking/lockdep.c:232...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for file systems will collapse the THP for files that are opened in read-only mode and mapped with VMEXEC. The intended use case is to avoid TLB misses f...

kernel: mm/khugepaged: write all dirty file folios when collapsing

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

kernel: mm/huge_memory: update file PMD counter before folio_put()

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

Linux Distros Unpatched Vulnerability : CVE-2026-72175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series userfaultfd/pagemap: pre- existing fixes. These are pre-existing bug fixes that were carrie...

kernel: mm: thp: deny THP for files on anonymous inodes

A flaw was found in the Linux kernel's Transparent Huge Pages THP mechanism. This vulnerability occurs because the filethpenabled function incorrectly allows THP for files on anonymous inodes, which are not designed for this feature. An attacker could potentially exploit this by manipulating...

UBUNTU-CVE-2026-72175

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series "userfaultfd/pagemap: pre-existing fixes". These are pre-existing bug fixes that were carried at the front of the userfaultfd RWP working-set-tracking series up...

CVE-2026-72043

This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...

CVE-2026-68086

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

CVE-2026-68166

The CVE-2026-68166 issue in the Linux kernel is addressed by restricting userfaultfd registrations. The fix updates vma_can_userfault() to reject VM_SHADOW_STACK and VM_SPECIAL so that drivers implementing vm_uffd_ops cannot register special VMAs with userfaultfd. VM_SPECIAL’s inclusion of VM_DON...

EUVD-2026-55552

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs. With userfaultfd access, you can register on the shadow stack, discard a page ... and inject a page with...

CVE-2026-68166 userfaultfd: prevent registration of special VMAs

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs. With userfaultfd access, you can register on the shadow stack, discard a page ... and inject a page with...

Linux Distros Unpatched Vulnerability : CVE-2026-68086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 mm: fs: remove...

PT-2026-69487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mm/khugepaged component where data loss can occur during the collapsing of Transparent Huge Pages THPs. The problem arises because collapse file can coexist with...

CVE-2026-64181

A flaw was found in the Linux kernel's memory management subsystem. On 32-bit x86 systems with Transparent Huge Pages THP enabled, a missing feature for handling special page table entries can lead to incorrect tracking of memory resources. This can result in system warnings, errors related to...