https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:39:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11343 bdu:2026-11343 https://cve.radiocsirt.org/vuln/bdu:2026-11343 https://cve.radiocsirt.org/vuln/euvd-2026-357015 EUVD-2026-357015 https://cve.radiocsirt.org/vuln/euvd-2026-357015 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49418 <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49418 https://cve.radiocsirt.org/vuln/ghsa-x3qv-w3hg-xgc7 <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> <p>When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager&#39;s page list. A subsequent page fault will cause the fault handler to re-insert the page into the object&#39;s list. This corrupts the list, and on object destruction the page is freed twice.</p> <p>An unprivileged local user with access to a device that provides memory-mapped I/O can trigger a use-after-free in the kernel, though this is limited to a pool of objects (&#34;fictitious pages&#34;) that are never recycled for a different purpose. It may be possible to exploit this to escalate privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-x3qv-w3hg-xgc7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2165 <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2165