2 matches found
Linux 5.6 IORING_OP_MADVISE Race Condition
Linux 5.6 has an issue with IORINGOPMADVISE racing with coredumping. Linux 5.6: IORINGOPMADVISE races with coredumping Last year, I noticed that core dumping iterates over current-mm's VMA list without proper locking, under the assumption that the VMA list can not be modified externally. This...
7.4AI score
SaveExploits0
Linux 5.6 IORING_OP_MADVISE Race Condition
Linux 5.6: IORINGOPMADVISE races with coredumping Last year, I noticed that core dumping iterates over current-mm's VMA list without proper locking, under the assumption that the VMA list can not be modified externally. This assumption was broken by userfaultfd, which can trigger VMA merging...
7.4AI score
SaveExploits0
20