CVE-2022-50657

Summary: CVE-2022-50657 pertains to the Linux kernel on riscv where a missing memcpy in kasan_init caused a panic during kasan_populate. The fix adds the missing memcpy so that newly allocated base_pud/base_p4d regions copy in kasan_early_shadow_pud/p4d contents, preventing page faults when readi...

CVE-2025-39910 mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasanpopulatevmalloc kasanpopulatevmalloc and its helpers ignore the caller's gfpmask and always allocate memory using the hardcoded GFPKERNEL flag. This makes them inconsistent with...