CVE-2026-68166

The CVE-2026-68166 issue in the Linux kernel is addressed by restricting userfaultfd registrations. The fix updates vma_can_userfault() to reject VM_SHADOW_STACK and VM_SPECIAL so that drivers implementing vm_uffd_ops cannot register special VMAs with userfaultfd. VM_SPECIAL’s inclusion of VM_DON...

EUVD-2026-55552

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs. With userfaultfd access, you can register on the shadow stack, discard a page ... and inject a page with...