CVE-2022-2590-analysis

CVE-2022-2590, Dirty COW restricted to shmem linux kernel version: Linux/x86 6.0.0-rc1 commit 37887783b3fef877bf34b8992c9199864da4afcb Introduction: this vulnerability allows the attacker to write arbitrary content to read-only shared memory page by satisfying the function canfollowwritepte, whic...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_53330)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202653330 advisory. kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel...

DEBIAN-CVE-2026-89987

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: transfer the pmd dirty bit to the folio on zap zaphugepmdfolio propagates the pmd young bit to the folio for the file case, but not the dirty bit. The pte path does propagate it, in zappresentfolioptes and so does...

CVE-2026-89987

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: transfer the pmd dirty bit to the folio on zap zaphugepmdfolio propagates the pmd young bit to the folio for the file case, but not the dirty bit. The pte path does propagate it, in zappresentfolioptes and so does...

CVE-2026-89815 drm/ttm: Drop tt->restore after successful restore

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...

CVE-2026-89815

CVE-2026-89815 affects the Linux kernel in the drm/ttm (Translation Table Manager) subsystem, specifically triggered via the Intel Xe GPU driver 's execution buffer path. The root cause is that ttm_pool_restore_and_alloc() fails to free and drop tt->restore after a successful restore commit, l...

CVE-2026-89815: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...

kernel: drm/i915: Fix potential overflow of shmem scatterlist length

A flaw was found in the Linux kernel's graphics memory management drm/i915 component. This vulnerability occurs when a large shared memory object's internal list of memory segments, called a scatterlist, is populated. If the total size of these segments exceeds 4 Gigabytes GB, a numerical overflo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fixed the BUGON in mmapPROTWRITE, MAPPRIVATE. A lack of check for copy-on-write COW mapping in drmgemshmemmmap allows users to call mmap with PROTWRITE and MAPPRIVATE flags, causing a kernel panic due to BUGON i...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel before version 6.0.3, the file drivers/gpu/drm/virtio/virtgpuobject.c misinterprets the return value of drmgemshmemgetsgtable. It expects the value to be NULL in the error case, but in reality, it is an error pointer...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fixed the issue where shmem xarray updates occur during migration. A shmem folio can be either in the page cache or in the swap cache, but not both at the same time. Specifically, once it is in the swap cache,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed a page fault in ivpubounbindallbosfromcontext...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/shmem-helper: Removed the erroneous “put” operation in the error path. The drmgemshmemmmap function does not maintain this reference, resulting in the GEM object being freed prematurely, leading to a “use-after-free”...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether the transferred 2D BO is a shmem BO. The transferred 2D BO must always be a shmem BO. Add a check to prevent NULL dereferencing if the user space passes a VRAM BO...

PT-2026-82198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...

The vulnerability of the mm/shmem component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/shmem component in Linux kernel relates to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the shmem module in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the shmem module in the Linux operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74482

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...

CVE-2026-74482

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...

CVE-2026-74482 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...