17 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-93243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit...
CVE-2026-93243
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...
Unbreakable Enterprise kernel security update
6.12.0-107.59.3.2 - xfrm: delete x-tunnel as we delete x Sabrina Dubroca CVE-2025-40215 6.12.0-107.59.3.1 - Revert 'iommu/amd: Skip enabling command/event buffers for kdump' Dongli Zhang Orabug: 38781323 6.12.0-107.59.3 - rds: Add smprmb before reading cdestroyinprog Hakon Bugge Orabug: 38352483 ...
CVE-2025-40272: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...
CVE-2022-49049: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfdsecret When one tries to grow an existing memfdsecret with ftruncate, one gets a panic 1. For example, doing the following reliably induces the panic: fd = memfdsecret; ftruncatefd, 10;...
CVE-2021-47463
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...
CVE-2021-47463
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...
CVE-2021-47463
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...
CVE-2021-47463 mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...
CVE-2021-47463: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...
CVE-2024-35872
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...
CVE-2024-35872 mm/secretmem: fix GUP-fast succeeding on secretmem folios
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...
CVE-2024-35872
Summary: CVE-2024-35872 affects the Linux kernel mm/secretmem feature. The issue arose because folios for secretmem could be added to batches without the LRU flag, making folio_is_secretmem() unreliable and enabling a local attacker to trigger GUP-fast on secretmem folios. The fix removes the unr...
CVE-2024-35872: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...
PT-2024-8497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's mm/secretmem component, where the function folio is secretmem relies on secretmem folios being LRU folios to save cycles. However, folios might...
PT-2022-29919
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description A potential security issue exists in the Linux Kernel, specifically in the mm/secretmem module, which could lead to a panic when growing a memfd secret. The actual impact and attack...
PT-2022-29238
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential security issue exists in the Linux Kernel, specifically in the mm/secretmem module, which could lead to a panic when growing a memfd secret. The actual impact and attack plausibili...