https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:22:40.861950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00713 bdu:2018-00713 2026-10-03T02:22:40.882173+00:00 bdu:2018-00713 https://cve.radiocsirt.org/vuln/certfr-2018-avi-321 certfr-2018-avi-321 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu . Elles permettent à un attaquant de provo… 2026-10-03T02:22:40.882207+00:00 certfr-2018-avi-321 https://cve.radiocsirt.org/vuln/cnvd-2018-08146 cnvd-2018-08146 2026-10-03T02:22:40.882226+00:00 cnvd-2018-08146 https://cve.radiocsirt.org/vuln/euvd-2026-61058 EUVD-2026-61058 2026-10-03T02:22:40.882239+00:00 EUVD-2026-61058 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1095 fkie_cve-2018-1095 2026-10-03T02:22:40.882249+00:00

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

 https://cve.radiocsirt.org/vuln/ghsa-m6f7-q6m8-788v GHSA-m6f7-q6m8-788v 2026-10-03T02:22:40.882277+00:00

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

 https://cve.radiocsirt.org/vuln/gsd-2018-1095 gsd-2018-1095 2026-10-03T02:22:40.882293+00:00 gsd-2018-1095 https://cve.radiocsirt.org/vuln/rhsa-2018:2948 RHSA-2018:2948 — Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update 2026-10-03T02:22:40.882303+00:00

kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service kernel: Mishandled freeing of instances in pcrypt.c can allow a local user to cause a denial of service kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg() kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service hw: cpu: speculative store bypass kernel: drivers/block/loop.c mishandles lo_release…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1095 UBUNTU-CVE-2018-1095 2026-10-03T02:22:40.882374+00:00

Affected: Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem, Ubuntu:18.04:LTS: linux-raspi2

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.