-

CVE-2026-23056

In the Linux kernel, the following vulnerability has been resolved:

uacce: implement mremap in uacce_vm_ops to return -EPERM

The current uacce_vm_ops does not support the mremap operation of
vm_operations_struct. Implement .mremap to return -EPERM to remind
users.

The reason we need to explicitly disable mremap is that when the
driver does not implement .mremap, it uses the default mremap
method. This could lead to a risk scenario:

An application might first mmap address p1, then mremap to p2,
followed by munmap(p1), and finally munmap(p2). Since the default
mremap copies the original vma's vm_private_data (i.e., q) to the
new vma, both munmap operations would trigger vma_close, causing
q->qfr to be freed twice(qfr will be set to null here, so repeated
release is ok).
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 4c042bc71474dbe417c268f4bfb8ec196f802f07
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < a407ddd61b3e6afc5ccfcd1478797171cf5686ee
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < ba29b59d124e725e0377f09b2044909c91d657a1
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < 02695347be532b628f22488300d40c4eba48b9b7
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.7
Status affected
Version < 5.7
Version 0
Status unaffected
Version <= 6.6.*
Version 6.6.122
Status unaffected
Version <= 6.12.*
Version 6.12.68
Status unaffected
Version <= 6.18.*
Version 6.18.8
Status unaffected
Version <= *
Version 6.19-rc7
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Es wurden noch keine Metriken (CVSS, EPSS) zu dieser CVE veröffentlicht.
Es wurden noch keine Informationen zu CWE veröffentlicht.