https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 12:11:18 +0000 https://vulnerability.circl.lu/vuln/cve-2024-47676 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway</p> <p>Syzbot reports a UAF in hugetlb_fault(). This happens because vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA to be freed before hugetlb_vma_unlock_read() is called.</p> <p>We can fix this by using a modified version of vmf_anon_prepare() that doesn&#39;t release the VMA lock on failure, and then release it ourselves after hugetlb_vma_unlock_read().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway</p> <p>Syzbot reports a UAF in hugetlb_fault(). This happens because vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA to be freed before hugetlb_vma_unlock_read() is called.</p> <p>We can fix this by using a modified version of vmf_anon_prepare() that doesn&#39;t release the VMA lock on failure, and then release it ourselves after hugetlb_vma_unlock_read().</p> https://vulnerability.circl.lu/vuln/cve-2024-47676