CVE-2026-49428
2026-08-19
05h57 +00:00
05h57 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
posixshm: system calls can incorrectly free memory of largepage objects
Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improperly Controlled Modification of Dynamically-Determined Object Attributes The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified. |
