Linux 6.4 Use-After-Free / Race Condition Exploit

There is a race between mbind and VMA-locked page faults in the Linux 6.4 kernel, leading to a use-after-free condition. Linux 6.4: UAF race between mbind and VMA-locked page fault tested on git master, at commit 57012c57536f Summary: There's a race between mbind and VMA-locked page faults, leadi...

Linux kernel do_mbind() Buffer Overflow

The vulnerability of the dombind function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...

Use after free race between mbind() and vma-locked page fault

...

SUSE CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

DEBIAN-CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

AZL-28546 CVE-2023-4611 affecting package kernel for versions less than 5.15.135.1-2

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

UBUNTU-CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

CVE-2023-4611 Use after free race between mbind() and vma-locked page fault

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak. Mitigation Mitigation for this...

CVE-2023-4611: Use After Free

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

K08478022: Linux kernel vulnerability CVE-2017-7616

Security Advisory Description Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...

SUSE CVE-2017-7616

Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...

PT-2025-8008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the mm/mempolicy component. The problem occurs when mpol new is allocated but not used in a restart loop,...

PT-2021-26574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns a problem in the mm/mempolicy component where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL in the mbind function are not properly handled. This is an...

PT-2021-26643

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.15 Description: The issue concerns a problem in the mm/mempolicy component where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL in the mbind function are not properly handled. This is an...

PT-2021-30569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns the mbind function in the Linux Kernel, where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL policies are not properly handled. This could potentially lead to...

PT-2021-30638

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15 Description The issue concerns a problem in the mm/mempolicy component where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL in the mbind function are not properly handled. This is an...

PT-2021-30346

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns the mbind function in the Linux Kernel, where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL policies are not properly handled. This could potentially lead to...