Lucene search
+L

15 matches found

NVD
NVD
added yesterday5 views

CVE-2026-64582

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the pendingmmaps list and releases pendinglock while the struct's kref is still at 1: listdelinit&ip-pendingmmaps;...

SaveExploits0References5
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.31 views

CVE-2026-64300 perf/aux: Fix page UAF in map_range()

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in maprange maprange reads rb-auxpages, rb-auxnrpages and rb-auxpgoff via perfmmaptopage while holding only event-mmapmutex. Those fields are serialized by rb-auxmutex, and mmapmutex is per event. Thus, two...

7.8CVSS0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.11 views

PT-2026-64521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the map range function where it accesses rb-aux pages, rb-aux nr pages, and rb-aux pgoff via perf mmap to page while holding only the event-mmap mutex. Because these...

7.8CVSS5.9AI score0.00162EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/21 8:17 p.m.9 views

CVE-2026-65062

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sortedset.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

3.8CVSS0.00117EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/19 5:35 p.m.10 views

SUSE CVE-2026-53401

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfbmmap omapfbmmap has a race condition with OMAPFBSETUPPLANE ioctl that can lead to use-after-free: The fbmmap entry point holds mmlock but not lock fbinfo-lock, while ioctl handlers like...

7CVSS5.3AI score0.00129EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/19 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-53401

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: omap2: fix use-after-free in omapfbmmap omapfbmmap has a race condition with OMAPFBSETUPPLANE ioctl that can lead to use-after-free: The fbmmap entry...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/18 10:5 a.m.34 views

CVE-2026-23248

CVE-2026-23248 affects the Linux kernel perf/core component, specifically the perf_mmap path that initializes a ring_buffer. The issue is a race between a failing mmap() setup and a concurrent mmap() on a dependent event (e.g., due to output redirection). The ring_buffer pointer (event->rb) is...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-23248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix refcount bug and potential UAF in perfmmap Syzkaller reported a refcountt: addition on 0; use-after-free warning in perfmmap. The issue is caused...

7.8CVSS6.7AI score0.0012EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-26051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel perf event subsystem during ring buffer management. The issue occurs in the perf mmap function when a mmap setup fails and a concurrent mmap i...

7.8CVSS7.3AI score0.0012EPSS
SaveExploits0References23
CVE
CVE
added 2025/10/04 3:44 p.m.25 views

CVE-2023-53614

Summary: CVE-2023-53614 affects the Linux kernel in the mm/ksm path, where exit_mmap() may teardown VMAs and the maple tree while mmap_lock is held, risking a destroyed maple tree being dereferenced. The fix ensures maple tree validity by checking ksm_test_exit() after obtaining mmap_lock in read...

4.7CVSS5.9AI score0.00099EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - android: binder: stop saving a pointer to the VMA Do not record a pointer to a VMA outside of the mmaplock for later use. This is unsafe and there are a number ...

7.8CVSS6.5AI score0.00153EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/01 10:46 a.m.16 views

CLSA-2024-1725187614 kernel: Fix of 11 CVEs

drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...

7.8CVSS6.9AI score0.03292EPSS
SaveExploits2References1
Microsoft CVE
Microsoft CVE
added 2020/12/03 8:0 a.m.10 views

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call aka CID-246c320a8cfe.

...

7CVSS8.3AI score0.0045EPSS
SaveExploits1
OSV
OSV
added 2020/11/28 7:15 a.m.2 views

DEBIAN-CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

7CVSS6.2AI score0.0045EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/28 7:15 a.m.6 views

UBUNTU-CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

7CVSS6.7AI score0.0045EPSS
SaveExploits1References7
Rows per page
Query Builder