CVE-2026-90589 Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address space

When CONFIGTHREADSTACKMEMMAPPED is enabled, each thread stack is mapped into the kernel virtual address space with a guard page on either side, and the mapping is released during abort cleanup. kthreadabortcleanup in kernel/thread.c has two paths: a deferred one for self-abort, which stashes the...

CVE-2026-90589

The Zephyr RTOS suffers from a memory leak in kernel/thread.c when CONFIG_THREAD_STACK_MEM_MAPPED is enabled. The k_thread_abort_cleanup() function fails to unmap the thread stack when a thread is aborted by another thread, as the immediate cleanup path incorrectly references the stashed address ...

CVE-2026-90589 Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address space

When CONFIGTHREADSTACKMEMMAPPED is enabled, each thread stack is mapped into the kernel virtual address space with a guard page on either side, and the mapping is released during abort cleanup. kthreadabortcleanup in kernel/thread.c has two paths: a deferred one for self-abort, which stashes the...

SUSE CVE-2026-93074

In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use vaphys for kaddr in directaccess Use vaphys instead of virtaddr + linearoffset for the kaddr return in fsdevdaxdirectaccess. The previous code added a device-linear byte offset to virtaddr which is va of ranges0, b...

PT-2026-94872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fsdev dax direct access function where the kernel virtual address is calculated by adding a device-linear byte offset to virt addr. In multi-range devices with...

CVE-2026-57843

NetBSD contains an information disclosure vulnerability in mmopen within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null or /dev/zero, which incorrectly receive the PKKMEM process flag. Attackers can...

CVE-2026-57843

CVE-2026-57843 is an information disclosure vulnerability in NetBSD affecting the mm_open() function in sys/dev/mm.c. The root cause is that world-accessible devices such as /dev/null and /dev/zero are incorrectly assigned the PK_KMEM process flag. This allows unprivileged local users to bypass t...

EUVD-2021-33413

Malicious code in bioql PyPI...

CVE-2022-23817: Improper Input Validation

Insufficient checking of memory buffer in AMD Secure Processor ASP Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation...

Randomizing the KUSER_SHARED_DATA Structure on Windows

Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...

Randomizing the KUSER_SHARED_DATA Structure on Windows

Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...

Randomizing the KUSER_SHARED_DATA Structure on Windows

Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...

KVA Shadow: Mitigating Meltdown on Windows

On January 3rd, 2018, Microsoft released an advisory and security updates that relate to a new class of discovered hardware vulnerabilities, termed speculative execution side channels, that affect the design methodology and implementation decisions behind many modern microprocessors. This post...