https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:31:24 +0000 https://cve.radiocsirt.org/vuln/cve-2021-47649 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>udmabuf: validate ubuf-&gt;pagecount</p> <p>Syzbot has reported GPF in sg_alloc_append_table_from_pages(). The problem was in ubuf-&gt;pages == ZERO_PTR.</p> <p>ubuf-&gt;pagecount is calculated from arguments passed from user-space. If user creates udmabuf with list.size == 0 then ubuf-&gt;pagecount will be also equal to zero; it causes kmalloc_array() to return ZERO_PTR.</p> <p>Fix it by validating ubuf-&gt;pagecount before passing it to kmalloc_array().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>udmabuf: validate ubuf-&gt;pagecount</p> <p>Syzbot has reported GPF in sg_alloc_append_table_from_pages(). The problem was in ubuf-&gt;pages == ZERO_PTR.</p> <p>ubuf-&gt;pagecount is calculated from arguments passed from user-space. If user creates udmabuf with list.size == 0 then ubuf-&gt;pagecount will be also equal to zero; it causes kmalloc_array() to return ZERO_PTR.</p> <p>Fix it by validating ubuf-&gt;pagecount before passing it to kmalloc_array().</p> https://cve.radiocsirt.org/vuln/cve-2021-47649