CVE-2024-46852 dma-buf: heaps: Fix off-by-one in CMA heap fault handler

In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault handler Until VMDONTEXPAND was added in commit 1c1914d6e8c6 "dma-buf: heaps: Don't track CMA dma-buf pages under RssFile" it was possible to obtain a mapping larger than the buffer...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2024-2328)

"According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of craft...

CVE-2024-42075

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

DEBIAN-CVE-2024-42075

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

CVE-2024-42075 bpf: Fix remap of arena.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

CVE-2024-42075 bpf: Fix remap of arena.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

CVE-2024-42075 bpf: Fix remap of arena.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mremap operation not being accounted for in the bpf arena logic, which requires reference counts to be add...

PT-2024-29729 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the bpf arena logic in the Linux kernel, which did not account for the mremap operation. This led to a potential use-after-free scenario in the arena vm close...

SUSE CVE-2023-1476

A use-after-free flaw was found in the Linux kernel's mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system...

CVE-2023-52646

A flaw was found in the Linux kernel’s Asynchronous I/O AIO subsystem. The issue arises due to a NULL pointer dereference null-deref when using the mremap function after a fork operation, specifically on old AIO mappings. The vulnerability occurs because the ioctxtable is set to NULL after the...

CVE-2023-52646

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

CVE-2023-52646

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

UBUNTU-CVE-2023-52646

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

CVE-2023-52646

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

CVE-2023-52646 aio: fix mremap after fork null-deref

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

CVE-2023-52646 aio: fix mremap after fork null-deref

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

CVE-2023-52646

CVE-2023-52646 concerns the Linux kernel. A null-deref can occur when mremap is invoked on an old aio mapping after a fork because mm->ioctx_table is NULL. The issue was introduced by the patch that made it possible to remap the aio ring and has been fixed by the accompanying commit (e4a0d3e72...

CVE-2023-52646 aio: fix mremap after fork null-deref

In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 "aio: Make it possible to remap aio ring" introduced a null-deref if mremap is called on an old aio mapping after fork as mm-ioctxtable will be set to NULL...

The vulnerability of the mremap() function in Linux operating systems allows a hacker to cause a system failure or gain increased privileges.

The vulnerability of the mremap function in Linux operating systems is related to the use of memory after it is freed, as a result of the race condition that occurs when processing the memory-management structure rmap. Exploiting this vulnerability can allow an attacker to cause a service failure...