Jann

Memory corruption occurs when processing display command line information. This issue is caused by the improper initialization of a variable.

A possible issue was reported in the Linux kernel when the trampoline check ip returns an address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up. The mmap minimum address restrictions will typically prevent creating mappings in this area, but the uretprobe syscall checks have been hardened to ensure this does not occur.

An out-of-bounds (OOB) memory write flaw exists in the `watch queue` event notification subsystem. This issue allows a local user to overwrite parts of the kernel state, which can lead to a denial of service or the acquisition of privileged access, such as root privileges. Technical exploitation may involve using PageJack to create a page-level Use-After-Free (UAF), a condition where the system continues to use a pointer after the memory it points to has been freed, to overwrite the `struct file` for local privilege escalation.