CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: update VMA end correctly on merge Vulnerability discovered by Antonius / Blue Dragon Security Overview Field| Detail ---|--- CVE ID| CVE-2026-23416 Subsystem| mm/mseal — mm/vma.c Affected| Linux kernel 6.17 through 7.0-rc5 Fixed in| Linux 7.0-rc6, stable backports...

CVE-2026-89961

A flaw was found in the Linux kernel's powerpc/mm component. An error in how physical frame number PFN offsets are tracked during compound page population can lead to incorrect memory management decisions. This issue could potentially result in system instability or a denial of service. Mitigatio...

CVE-2026-90046

A flaw was found in the Linux kernel. Specifically, within the mm/pagealloc component, an issue exists with the spintrylock function when used in Non-Maskable Interrupt NMI contexts on Uniprocessor UP systems. A local attacker, by utilizing BPF Berkeley Packet Filter programs, could exploit this...

CVE-2026-98939

The Linux kernel contains a vulnerability where a possible deadlock occurs on systems with a discrete GPU . The root cause is an x86 commit that introduced an mmap_read_lock() in kernel page protection munging code. This creates a circular locking dependency because the huge vmap code holds the s...

CVE-2026-98939

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...

EUVD-2026-108911

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...

CVE-2026-98918

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

CVE-2026-98918

The Linux kernel contains a vulnerability where the DAMON (Deterministic Autorecover Memory Number) subsystem can cause a memory overrun on arm64 architectures. The issue arises in damon_ptep_mkold() because a random byte address, which may be unaligned, is passed to a page table walk. In some ca...

EUVD-2026-108882

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

K000163832: Linux kernel vulnerability CVE-2026-46121

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcgpath kfree with damonsysfslock Patch series "mm/damon/sysfs-schemes: fix use-after-free for memcgpath". Reads of 'memcgpath' and 'path' files in DAMON sysfs...

CVE-2026-89966

A flaw was found in the Linux kernel's huge page memory management mm/hugetlbcma. An unprivileged local user could trigger a null pointer dereference. This occurs by requesting a gigantic hugepage allocation with specific memory policy settings on systems where the Contiguous Memory Allocator CMA...

PT-2026-120179

Name of the Vulnerable Software and Affected Versions vLLM versions 0.7.3 through 0.30.x Description When trust remote code is enabled, the software forwards the request-supplied mm processor kwargs.code revision to the Transformers AutoProcessor.from pretrained function. This allows clients to...

PT-2026-120181

Name of the Vulnerable Software and Affected Versions vLLM versions 0.7.3 through 0.30.x Description An uncontrolled resource consumption issue allows remote clients to manipulate multimodal processor parameters by providing per-request mm processor kwargs. Attackers can specify excessive values...

SUSE CVE-2026-98729

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...

CVE-2026-93172

A flaw was found in the Linux kernel's memory management mm/mminit. A missing allocation check for pgdat-percpunodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-93066

A flaw was found in the Linux kernel. A race condition in the x86/mm/pat component, specifically between cpacollapselargepages and changepageattr, can lead to a use-after-free vulnerability. A local attacker, by concurrently loading and unloading modules, could exploit this to write into freed...

Linux Distros Unpatched Vulnerability : CVE-2026-98729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless,...

Linux Distros Unpatched Vulnerability : CVE-2026-98818

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: do not wake up kswapd in kfreercusheaf Since kfreercu can be called under pilock a raw spinlock in the scheduler, kfreercu itself should never allocat...

SUSE CVE-2026-98818

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd in kfreercusheaf Since kfreercu can be called under pilock a raw spinlock in the scheduler, kfreercu itself should never allocate memory with GFPKSWAPDRECLAIM as waking up kswapd ends up acquiring...

CVE-2026-98729

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...