kernel: highmem: fix checks in __kmap_local_sched_{in,out}

In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in kmaplocalschedin,out When CONFIGDEBUGKMAPLOCAL is enabled kmaplocalschedin,out check that even slots in the tsk-kmapctrl.pteval are unmapped. The slots are initialized with 0 value, but the check is done wi...

The vulnerability of the kmap_local() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kmaplocal function in the Linux operating system’s kernel is related to the doubling of the number of fixmap slots allocated for each processor that are used by kmaplocal. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2021-46910

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

CVE-2021-46910

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

DEBIAN-CVE-2021-46910

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

UBUNTU-CVE-2021-46910

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the debugging code of kmaplocal doubling the number of per-CPU repair mapping slots allocated to kmaplocal s...

SUSE CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

GHSA-FVCF-WGXJ-H7CH CSRF vulnerability in Jenkins Nomad Plugin allow SSRF

A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server...

CSRF vulnerability in Jenkins Nomad Plugin allow SSRF

A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server...

GHSA-Q5WM-QGXJ-H9PH Missing permission check in Jenkins Kmap Plugin allow SSRF

A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

Missing permission check in Jenkins Kmap Plugin allow SSRF

A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

Jenkins Kmap Plugin stores credentials in plain text

Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

GHSA-746X-XXRX-23JP Jenkins Kmap Plugin stores credentials in plain text

Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

PT-2022-29952

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns a fix in the kmap local sched in,out function. It was introduced in version v5.11 and fixed in version v5.15.34. The actual impact and attack plausibility have not yet been...

PT-2022-29624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns a fix for checks in specific functions, kmap local sched in and kmap local sched out. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2025-8009

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7 Description A vulnerability in the Linux kernel has been identified, which can cause runtime warnings when CONFIG DEBUG KMAP LOCAL is enabled. The issue arises from the kmap local sched in,out function...

DEBIAN-CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

UBUNTU-CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...