https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T04:52:27.212205+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99925 EUVD-2026-99925 2026-10-26T04:52:27.288562+00:00 EUVD-2026-99925 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4323 fkie_cve-2014-4323 2026-10-26T04:52:27.288599+00:00

The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.

 https://cve.radiocsirt.org/vuln/ghsa-pp3v-3h95-wqgh GHSA-pp3v-3h95-wqgh 2026-10-26T04:52:27.288633+00:00

The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.

 https://cve.radiocsirt.org/vuln/gsd-2014-4323 gsd-2014-4323 2026-10-26T04:52:27.288652+00:00 gsd-2014-4323 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4323 UBUNTU-CVE-2014-4323 2026-10-26T04:52:27.288664+00:00

Affected: Ubuntu:18.04:LTS: linux-hwe, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop, Ubuntu:20.04:LTS: linux-gkeop-5.15, Ubuntu:Pro:20.04:LTS: linux-nvidia-tegra-5.15, Ubuntu:20.04:LTS: linux-raspi2, Ubuntu:20.04:LTS: linux-riscv, Ubuntu:22.04:LTS: linux-ibm-6.8, Ubuntu:22.04:LTS: linux-intel-iot-realtime and 30 more

The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.