301 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mm: perform file ownership checks using the appropriate mount idmap Since the introduction of idmapped mounts, inode ownership checks for side-channel protection in mincore and madviseMADVPAGEOUT were performed against the...
derpyc0w
Disclaimer I am not responsible for anything you do with this code. This code comes with no warranty. Description Exploit for CVE-2016-5195 which maps a readonly SUID executable to memory readonly and uses the race condition to overwrite it with an ELF of our choice. Payloads are available in NAS...
CVE-2016-5195-master
CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept for Android This repository demonstrates the vulnerability on vulnerable Android devices attached via ADB. It does not disable SELinux see https://github.com/timwr/CVE-2016-5195/issues/9 or install superuser on the device. $...
SUSE CVE-2026-99080
In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c. Recently people and syzbot have found ways to force it to happen with...
kernel: mm/khugepaged: write all dirty file folios when collapsing
A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...
DEBIAN-CVE-2026-99080
In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c. Recently people and syzbot have found ways to force it to happen with...
UBUNTU-CVE-2026-99080
In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c. Recently people and syzbot have found ways to force it to happen with...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: mm: thp: Deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes, such as guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteacces...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlblock AA deadlock in gethugepageforhwpoison Two concurrent madviseMADVHWPOISON calls on the same hugetlb page can trigger a recursive spinlock self-deadlock AA deadlock on hugetlblock when racing with...
kernel: mm/khugepaged: write all dirty file folios when collapsing
A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed corruption of the shrinker list caused by the madvise IOCTL. Calling the madvise IOCTL twice on BO causes corruption of the memory shrinker list, leading to a kernel crash. This occurs because BO is already on...
Linux Distros Unpatched Vulnerability : CVE-2026-93218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks...
Linux Distros Unpatched Vulnerability : CVE-2026-93217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange...
SUSE CVE-2026-93217
In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...
CVE-2026-93217
In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...
DEBIAN-CVE-2026-93217
In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...
UBUNTU-CVE-2026-93217
In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...
UBUNTU-CVE-2026-93218
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...
CVE-2026-93218 mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...
CVE-2026-93218
The Linux kernel contains a vulnerability in the mm/huge_memory component related to how it handles device-private Page Middle Directories (PMDs). A race condition occurs when an HMM-based GPU driver interacts with madvise(MADV_FREE). Specifically, migrate_vma_pages() can flip a PMD to a device-p...