CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: update VMA end correctly on merge Vulnerability discovered by Antonius / Blue Dragon Security Overview Field| Detail ---|--- CVE ID| CVE-2026-23416 Subsystem| mm/mseal — mm/vma.c Affected| Linux kernel 6.17 through 7.0-rc5 Fixed in| Linux 7.0-rc6, stable backports...

InfinityCore-Android-CVE-2026-89754

InfinityCore Android — CVE-2026-89754 MM 中文 概述 Infinity Core 系列 MM 子系统漏洞的 ARM64 实现。目标内核为该 CVE 官方测试形态（7.0 / 7.2 系）。机制、竞态时序、堆布局按官方 PoC 完整移植；icmmtarget.h 中的布局常量已按官方目标内核结构写死，符号地址按目标 vmlinux 修正即可。 编译 /toolchains/llvm/prebuilt/linux-x8664/bin/aarch64-linux-android29-clang \ -O2 -std=gnu11 -static...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped CVE-2026-72434 In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. CVE-2026-74406 I...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the mm/hugetlb.c component of the Linux kernel is related to an out-of-bounds pointer dereference. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copyhugetlbpagerange clears the uffd-wp bit of migration and hwpoison entries using hugepteclearuffdwp, which operates on the present-PTE bit position. Swap...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damonsetregions The DAMON core logic assumes that no length regions exist. However, several DAMON API callers—including DAMONSYSFS, DAMONRECLAIM, and DAMONLRUSORT—allow users to set empty...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Unbounded recursion in the free path has been prevented using a new kmalloc type. Commit 280ea9c3154b “mm/slab: Avoid allocating the slabobjext array from its own slab” prevents recursive allocation of objexts from kmall...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series “mm/damon: unurgent fixes for infinite loop, NULL de-ref and races”, v1.1. Sashiko identified several issues in DAMON that could lead to infinite loops,...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file; thus, multiple open files can update the same memory.high or memory.max value concurrently. Both handlers store the n...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/vma: properly unaccounts on mmapprepare failure mmapsetup accounts memory for relevant mappings via: securityvmenoughmemorymm - vmenoughmemory - vmacctmemory If mmapsetup fails, this indicates that this accounting did not take...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: Proper handling of freepagesprepare has been implemented in compactionfree. freepagesprepare may fail, but compactionfree does not handle this failure case. Pages that fail should not be added back to cc-freepages...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: Acquire initmm lock on huge vmap to avoid ptdump UAF Patch series “mm: fix UAF caused by race between ptdump and vmap pgtable freeing”, v6. Kernel page table walkers fall into two broad categories – those ranges where...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrinklruvec I’m observing some rcutasks stalls in the Meta fleet during reclaim. INFO: rcutasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idlecpu:...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty exhibit undefined behavior when invoked on a non-present PTE. In migratevmacollectpmd, these functions may be called on non-present entries e.g....

SUSE CVE-2026-99240

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500572)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500572 advisory. - NFSD: Define actions for the new timedeleg FATTR4 attributes Chuck Lever Orabug: 39004166 CVE-2025-40326 - ipv4: free inetopt and ireqopt afte...

DEBIAN-CVE-2026-99240

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...

CVE-2026-99240

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damoscommitquotagoal for zero targetvalue Patch series "mm/damon: move zero damos quota targetvalue handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...