SUSE CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

AZL-97292 CVE-2026-74672 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

EUVD-2026-64359

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-74672

CVE-2026-74672 is a use-after-free vulnerability in the Linux kernel affecting both x86 and arm64 architectures. The root cause is a race condition between the ptdump page table walker and the vmap huge page table promotion logic: vmap frees lower page tables when promoting to huge leaf entries w...

PT-2026-79677

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges wher...

Linux Distros Unpatched Vulnerability : CVE-2026-74672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series mm: fix UAF caused by race between ptdump and vmap pgtable freeing, v6. Kernel pag...

CVE-2026-74672: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-63955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG on BH disabled context getvmareanode currently triggers a BUG if ininterrupt returns true. However, ininterrupt also reports true when BH are disabled. The bridge code can call...

CVE-2026-46093: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmappurgelock in shrinker decayvapoolnode can be invoked concurrently from two paths: purgevmaparealazy when pools are being purged, and the shrinker via vmapnodeshrinkscan. However, decayvapoolnode is not safe t...

CVE-2025-39910: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasanpopulatevmalloc kasanpopulatevmalloc and its helpers ignore the caller's gfpmask and always allocate memory using the hardcoded GFPKERNEL flag. This makes them inconsistent with...

CVE-2025-38383 mm/vmalloc: fix data race in show_numa_info()

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in shownumainfo The following data-race was found in shownumainfo: ================================================================== BUG: KCSAN: data-race in vmallocinfoshow / vmallocinfoshow read to...

CVE-2025-38383: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in shownumainfo The following data-race was found in shownumainfo: ================================================================== BUG: KCSAN: data-race in vmallocinfoshow / vmallocinfoshow read to...

The vulnerabilities of Linux operating system’s mm/vmalloc components, which allow attackers to trigger service failures

The vulnerability of mm/vmalloc components in Linux operating systems is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2024-45022

CVE-2024-45022 affects Linux kernel mm/vmalloc: a high-order allocation fallback to order-0 in vm_area_alloc_pages() could lead __vmap_pages_range_noflush() to map pages with different shifts, risking memory corruption. The documentation states the fix is to remove the fallback code, so that if a...

CVE-2024-45022

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vmareaallocpages with high order fallback to order 0 The vmappagesrangenoflush assumes its argument pages contains pages with the same page shift. However, since commit e9c3cda4d86e "mm, vmalloc: f...

CVE-2024-45022 mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vmareaallocpages with high order fallback to order 0 The vmappagesrangenoflush assumes its argument pages contains pages with the same page shift. However, since commit e9c3cda4d86e "mm, vmalloc: f...

CVE-2024-41032

In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: check if a hash-index is in cpupossiblemask The problem is that there are systems where cpupossiblemask has gaps between set CPUs, for example SPARC. In this scenario addrtovbxa hash function can return an index whic...

CVE-2024-39474 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

CVE-2024-39474 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...