Lucene search
+L

1468 matches found

OSV
OSV
added 2025/03/27 5:15 p.m.6 views

UBUNTU-CVE-2023-52935

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race If an -anonvma is attached to the VMA, collapseandfreepmd requires it to be locked. Page table traversal is allowed under any one of the mmap lock, the anonvma lock if the VMA is associated with a...

7.8CVSS6.5AI score0.00194EPSS
SaveExploits0References14
OSV
OSV
added 2025/03/27 5:15 p.m.11 views

UBUNTU-CVE-2023-53002

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...

5.5CVSS6.3AI score0.00224EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/03/27 4:43 p.m.25 views

CVE-2023-53002 drm/i915: Fix a memory leak with reused mmap_offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...

0.00224EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/27 4:43 p.m.151 views

CVE-2023-53002

CVE-2023-53002 concerns the Linux kernel DRM/I915 memory leak when mmap_offset is reused. The root cause is that drm_vma_node_allow() and drm_vma_node_revoke() were not called in balanced pairs: allow is invoked once per-file per mmap_offset, while revoke was only called per-file per mmap_offset,...

5.5CVSS6.5AI score0.00224EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/27 4:43 p.m.10 views

CVE-2023-53002 drm/i915: Fix a memory leak with reused mmap_offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...

5.5CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/03/27 4:43 p.m.3 views

CVE-2023-53002 drm/i915: Fix a memory leak with reused mmap_offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...

5.9AI score0.00224EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/03/27 4:43 p.m.30 views

CVE-2023-53002

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...

5.5CVSS5.5AI score0.00224EPSS
SaveExploits0
CVE
CVE
added 2025/03/27 4:37 p.m.158 views

CVE-2023-52935

CVE-2023-52935 refers to a Linux kernel vulnerability in mm/khugepaged related to an ->anon_vma race when removing page tables. The issue could allow concurrent access to page tables during rmap traversal if an anon_vma is shared; the fix adds a re-check after acquiring the mmap lock so there ...

7.8CVSS6.5AI score0.00194EPSS
SaveExploits0References6Affected Software2
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a memory leak when the i915 driver reuses mmapoffset...

5.5CVSS6.3AI score0.00224EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:00 a.m.11 views

Vulnerability of the vhost_vdpa_mmap() function in the drivers/vhost/vdpa.c module – It is a driver for the IoTLB implementation for vhost and vringh in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

Vulnerability of the vhostvdpammap function in the drivers/vhost/vdpa.c module – The IoTLB implementation for vhost and vringh in the Linux operating system’s kernel is vulnerable due to incorrect handling of missing values. Exploiting this vulnerability could allow an attacker to cause service...

5.5CVSS5.5AI score0.00231EPSS
SaveExploits0References15Affected Software2
NVD
NVD
added 2025/03/12 10:15 a.m.18 views

CVE-2025-21853

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.5CVSS0.00244EPSS
SaveExploits0References10
OSV
OSV
added 2025/03/12 10:15 a.m.22 views

AZL-58536 CVE-2025-21853 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.5CVSS6.7AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/12 10:15 a.m.3 views

DEBIAN-CVE-2025-21853

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.5CVSS5.5AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/12 10:15 a.m.12 views

AZL-58487 CVE-2025-21853 affecting package kernel for versions less than 6.6.82.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.5CVSS6.7AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/12 10:15 a.m.21 views

UBUNTU-CVE-2025-21853

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.7CVSS6.1AI score0.00244EPSS
SaveExploits0References26
Cvelist
Cvelist
added 2025/03/12 9:42 a.m.33 views

CVE-2025-21853 bpf: avoid holding freeze_mutex during mmap operation

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

0.00244EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/03/12 9:42 a.m.18 views

CVE-2025-21853

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...

5.5CVSS5.5AI score0.00244EPSS
SaveExploits0
CVE
CVE
added 2025/03/12 9:42 a.m.149 views

CVE-2025-21853

CVE-2025-21853 affects the Linux kernel BPF mmap path. The issue arises from holding map->freeze_mutex for the entire duration of mmap mm/VMA manipulations when ensuring writeable map contents, which could deadlock. The fixed approach holds freeze_mutex only during writeability checks, increme...

5.5CVSS6.5AI score0.00244EPSS
SaveExploits0References10Affected Software1
CNNVD
CNNVD
added 2025/03/12 12:00 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from holding freezemutex during an mmap operation, which could result in a deadlock...

5.5CVSS6.3AI score0.00244EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/10 12:00 a.m.10 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-53180)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53180 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the...

5.5CVSS5.8AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder