UBUNTU-CVE-2023-54157

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc-vma in race with munmap cmllamas: clean forward port from commit 015ac18be7de "binder: fix UAF of alloc-vma in race with munmap" in 5.10 stable. It is needed in mainline after the revert of commit...

CVE-2023-54157

The CVE-2023-54157 issue concerns the Linux kernel binder code: a use-after-free in alloc->vma during a race with munmap. The root cause is a downgrade of the mmap lock that allows binder_update_page_range() to access alloc->vma while vm_area_free() may tear down the VMA, enabling a UAF as ...

EUVD-2022-55512

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix UAF of alloc-vma in race with munmap In commit 720c24192404 ANDROID: binder: change downwrite to downread binder assumed the mmap read lock is...

CVE-2022-50338

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-50338

The CVE-2022-50338 entry concerns a Linux kernel binder UAF in a race between binder_update_page_range() and munmap() that can access alloc->vma after it is freed. Affected component: kernel Binder in Linux kernel (stable branches 5.4 and 5.10). Root cause: improper locking around mmap/vma han...

CVE-2023-52438

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback The mmap read lock is used during the shrinker's callback, which means that using alloc-vma pointer isn't safe as it can race with munmap. As of commit dd2283f2605e "mm: mmap: zap...