GSD-2023-1000190 libbpf: Handle size overflow for ringbuf mmap

libbpf: Handle size overflow for ringbuf mmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000101 libbpf: Handle size overflow for ringbuf mmap

libbpf: Handle size overflow for ringbuf mmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33337 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns a handle size overflow for ringbuf mmap. It was introduced in version v5.8 and fixed in Linux Kernel version v5.10.158. The actual impact and attack plausibility have no...

PT-2023-34269

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential issue exists in the Linux Kernel, specifically in the privcmd ioctl mmap resource function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2023-33178 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: libbpf versions prior to v6.0.12 Description: The issue is related to a handle size overflow for ringbuf mmap. It was introduced in Linux Kernel version v5.8 and fixed in version v6.0.12. The actual impact and attack plausibility have not yet...

PT-2023-33896 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the privcmd ioctl mmap resource function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33267 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.15.81 Description: The issue is related to a handle size overflow for ringbuf mmap in libbpf. It was introduced in version v5.8 and fixed in version v5.15.82. The actual impact and attack plausibility hav...

PT-2023-34569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential issue exists in the Linux Kernel, specifically in the privcmd ioctl mmap resource function. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2024-11887

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A size overflow issue has been identified in the Linux kernel, specifically in the libbpf component when handling ringbuf mmap. The maximum size of ringbuf is 2GB on x86-64 hosts, which...

PT-2023-9433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the nommu component of the Linux kernel, specifically in the do mmap error path. The preallocation of the maple tree nodes may leak if the error...

PT-2025-13311

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel related to the -anon vma attachment to the VMA. The issue arises when collapse and free pmd requires the -anon vma to be locked, but the lock ...

PT-2022-38058

Уязвимость функции privcmd ioctl mmap resource модуля drivers/xen/privcmd.c драйвера устройств кадрового буфера ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-43085

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the xen/privcmd component, specifically in the privcmd ioctl mmap resource function. The issue arises because the kdata.num variable, which is...

kernel: ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential AB/BA lock with buffermutex and mmaplock syzbot caught a potential deadlock between the PCM runtime-buffermutex and the mm-mmaplock. It was brought by the recent fix to cover the racy read/write and other...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

CVE-2022-20369

An out-of-bounds write flaw was found in the Linux kernel’s UVC camera and similar device driver code due to improper input validation in the v4l2-mem2mem.c source code in how a user calls ioctl VIDIOCQUERYBUF with mmap. This issue occurs if the capture buffer mapped directly from the userspace...

PT-2025-41022

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-revert-b653db77-fix+ 29 Description A flaw exists in the Linux kernel's mm/huge memory subsystem related to handling transparent huge pages THP splits. Specifically, the issue involves incorrectly overwriti...

CVE-2022-42464

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel...

CVE-2022-42464

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel...

Design/Logic Flaw

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel...