CVE-2024-50182 secretmem: disable memfd_secret() if arch cannot set direct map

In the Linux kernel, the following vulnerability has been resolved: secretmem: disable memfdsecret if arch cannot set direct map Return -ENOSYS from memfdsecret syscall if !cansetdirectmap. This is the case for example on some arm64 configurations, where marking 4k PTEs in the direct map not...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue with the memfdsecret function call when it cannot be mapped directly...

PT-2024-34015

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the secretmem vulnerability Description: A vulnerability in the Linux kernel has been resolved, related to the secretmem feature. The issue occurs when the memfd secret...

kernel: mm/secretmem: fix panic when growing a memfd_secret

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfdsecret When one tries to grow an existing memfdsecret with ftruncate, one gets a panic 1. For example, doing the following reliably induces the panic: fd = memfdsecret; ftruncatefd, 10;...

PT-2022-29919

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description A potential security issue exists in the Linux Kernel, specifically in the mm/secretmem module, which could lead to a panic when growing a memfd secret. The actual impact and attack...

PT-2022-29238

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential security issue exists in the Linux Kernel, specifically in the mm/secretmem module, which could lead to a panic when growing a memfd secret. The actual impact and attack plausibili...

PT-2025-7977

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A issue in the Linux kernel has been resolved, related to the memfd secret functionality. When attempting to grow an existing memfd secret using ftruncate, a panic occurs due to the...