-

CVE-2026-23056

In the Linux kernel, the following vulnerability has been resolved:

uacce: implement mremap in uacce_vm_ops to return -EPERM

The current uacce_vm_ops does not support the mremap operation of
vm_operations_struct. Implement .mremap to return -EPERM to remind
users.

The reason we need to explicitly disable mremap is that when the
driver does not implement .mremap, it uses the default mremap
method. This could lead to a risk scenario:

An application might first mmap address p1, then mremap to p2,
followed by munmap(p1), and finally munmap(p2). Since the default
mremap copies the original vma's vm_private_data (i.e., q) to the
new vma, both munmap operations would trigger vma_close, causing
q->qfr to be freed twice(qfr will be set to null here, so repeated
release is ok).
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 78d99f062d42e3af2ca46bde1a8e46e0dfd372e3
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < ebfa85658a39b49ec3901ceea7535b73aa0429e6
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < 75b29bdc935ff93b8e8bf6f6b4d8a4810b26e06f
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < 4c042bc71474dbe417c268f4bfb8ec196f802f07
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < a407ddd61b3e6afc5ccfcd1478797171cf5686ee
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < ba29b59d124e725e0377f09b2044909c91d657a1
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
Version < 02695347be532b628f22488300d40c4eba48b9b7
Version 015d239ac0142ad0e26567fd890ef8d171f13709
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.7
Status affected
Version < 5.7
Version 0
Status unaffected
Version <= 5.10.*
Version 5.10.249
Status unaffected
Version <= 5.15.*
Version 5.15.199
Status unaffected
Version <= 6.1.*
Version 6.1.162
Status unaffected
Version <= 6.6.*
Version 6.6.122
Status unaffected
Version <= 6.12.*
Version 6.12.68
Status unaffected
Version <= 6.18.*
Version 6.18.8
Status unaffected
Version <= *
Version 6.19
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.099
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.