Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Oded Gabbay

#23486of 60,391
12.6Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2023-7578
2023-11-22
5.5
CVE-2023-50431
Linux
Linux Kernel
The issue is related to the `sec attest info` function in the Linux kernel, which allows an information leak to user space because `info->pad0` is not initialized. This can potentially allow an attacker to gain unauthorized access to protected information.
PT-2024-10493
2022-02-17
7.1
CVE-2022-48797
Linux
Linux Kernel
The issue is related to the Linux kernel's memory management, specifically with the NUMA balancing feature. Enabling NUMA balancing can cause corruption when used with certain test loads, such as Oded Gabbay's Gaudi accelerator test load, under specific conditions (e.g., without process affinity and using GUP to pin pages for DMA access). The problem arises from a nonsensical condition in the `change pte range()` function that uses `page mapcount(page)` to decide if a COW page should be NUMA-protected, which is irrelevant due to other references like GUP. The fix involves using `page count()` instead. This change implies that NUMA balancing may alter page protections, leading to spurious COW events.