<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T11:59:47.851901+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2026-01135</id>
    <title>bdu:2026-01135</title>
    <updated>2026-10-03T11:59:47.952040+00:00</updated>
    <content>bdu:2026-01135</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2026-01135"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2023-54077</id>
    <title>BELL-CVE-2023-54077</title>
    <updated>2026-10-03T11:59:47.952075+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2023-54077"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-345366</id>
    <title>EUVD-2026-345366</title>
    <updated>2026-10-03T11:59:47.952102+00:00</updated>
    <content>EUVD-2026-345366</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-345366"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2023-54077</id>
    <title>fkie_cve-2023-54077</title>
    <updated>2026-10-03T11:59:47.952116+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>fs/ntfs3: Fix memory leak if ntfs_read_mft failed</p>
<p>Label ATTR_ROOT in ntfs_read_mft() sets is_root = true and
ni-&gt;ni_flags |= NI_FLAG_DIR, then next attr will goto label ATTR_ALLOC
and alloc ni-&gt;dir.alloc_run. However two states are not always
consistent and can make memory leak.</p>
<p>1) attr_name in ATTR_ROOT does not fit the condition it will set
 is_root = true but NI_FLAG_DIR is not set.
 2) next attr_name in ATTR_ALLOC fits the condition and alloc
 ni-&gt;dir.alloc_run
 3) in cleanup function ni_clear(), when NI_FLAG_DIR is set, it frees
 ni-&gt;dir.alloc_run, otherwise it frees ni-&gt;file.run
 4) because NI_FLAG_DIR is not set in this case, ni-&gt;dir.alloc_run is
 leaked as kmemleak reported:</p>
<p>unreferenced object 0xffff888003bc5480 (size 64):
  backtrace:
    [&lt;000000003d42e6b0&gt;] __kmalloc_node+0x4e/0x1c0
    [&lt;00000000d8e19b8a&gt;] kvmalloc_node+0x39/0x1f0
    [&lt;00000000fc3eb5b8&gt;] run_add_entry+0x18a/0xa40 [ntfs3]
    [&lt;0000000011c9f978&gt;] run_unpack+0x75d/0x8e0 [ntfs3]
    [&lt;00000000e7cf1819&gt;] run_unpack_ex+0xbc/0x500 [ntfs3]
    [&lt;00000000bbf0a43d&gt;] ntfs_iget5+0xb25/0x2dd0 [ntfs3]
    [&lt;00000000a6e50693&gt;] ntfs_fill_super+0x218d/0x3580 [ntfs3]
    [&lt;00000000b9170608&gt;] get_tree_bdev+0x3fb/0x710
    [&lt;000000004833798a&gt;] vfs_get_tree+0x8e/0x280
    [&lt;000000006e20b8e6&gt;] path_mount+0xf3c/0x1930
    [&lt;000000007bf15a5f&gt;] do_mount+0xf3/0x110
    ...</p>
<p>Fix this by always setting is_root and NI_FLAG_DIR together.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2023-54077"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-gg3g-2q75-6v65</id>
    <title>GHSA-gg3g-2q75-6v65</title>
    <updated>2026-10-03T11:59:47.952158+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>fs/ntfs3: Fix memory leak if ntfs_read_mft failed</p>
<p>Label ATTR_ROOT in ntfs_read_mft() sets is_root = true and
ni-&gt;ni_flags |= NI_FLAG_DIR, then next attr will goto label ATTR_ALLOC
and alloc ni-&gt;dir.alloc_run. However two states are not always
consistent and can make memory leak.</p>
<p>1) attr_name in ATTR_ROOT does not fit the condition it will set
 is_root = true but NI_FLAG_DIR is not set.
 2) next attr_name in ATTR_ALLOC fits the condition and alloc
 ni-&gt;dir.alloc_run
 3) in cleanup function ni_clear(), when NI_FLAG_DIR is set, it frees
 ni-&gt;dir.alloc_run, otherwise it frees ni-&gt;file.run
 4) because NI_FLAG_DIR is not set in this case, ni-&gt;dir.alloc_run is
 leaked as kmemleak reported:</p>
<p>unreferenced object 0xffff888003bc5480 (size 64):
  backtrace:
    [&lt;000000003d42e6b0&gt;] __kmalloc_node+0x4e/0x1c0
    [&lt;00000000d8e19b8a&gt;] kvmalloc_node+0x39/0x1f0
    [&lt;00000000fc3eb5b8&gt;] run_add_entry+0x18a/0xa40 [ntfs3]
    [&lt;0000000011c9f978&gt;] run_unpack+0x75d/0x8e0 [ntfs3]
    [&lt;00000000e7cf1819&gt;] run_unpack_ex+0xbc/0x500 [ntfs3]
    [&lt;00000000bbf0a43d&gt;] ntfs_iget5+0xb25/0x2dd0 [ntfs3]
    [&lt;00000000a6e50693&gt;] ntfs_fill_super+0x218d/0x3580 [ntfs3]
    [&lt;00000000b9170608&gt;] get_tree_bdev+0x3fb/0x710
    [&lt;000000004833798a&gt;] vfs_get_tree+0x8e/0x280
    [&lt;000000006e20b8e6&gt;] path_mount+0xf3c/0x1930
    [&lt;000000007bf15a5f&gt;] do_mount+0xf3/0x110
    ...</p>
<p>Fix this by always setting is_root and NI_FLAG_DIR together.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-gg3g-2q75-6v65"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-54077</id>
    <title>UBUNTU-CVE-2023-54077</title>
    <updated>2026-10-03T11:59:47.952190+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 110 more</p>
<p>In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft failed Label ATTR_ROOT in ntfs_read_mft() sets is_root = true and ni-&gt;ni_flags |= NI_FLAG_DIR, then next attr will goto label ATTR_ALLOC and alloc ni-&gt;dir.alloc_run. However two states are not always consistent and can make memory leak.  1) attr_name in ATTR_ROOT does not fit the condition it will set  is_root = true but NI_FLAG_DIR is not set.  2) next attr_name in ATTR_ALLOC fits the condition and alloc  ni-&gt;dir.alloc_run  3) in cleanup function ni_clear(), when NI_FLAG_DIR is set, it frees  ni-&gt;dir.alloc_run, otherwise it frees ni-&gt;file.run  4) because NI_FLAG_DIR is not set in this case, ni-&gt;dir.alloc_run is  leaked as kmemleak reported: unreferenced object 0xffff888003bc5480 (size 64):   backtrace:     [&lt;000000003d42e6b0&gt;] __kmalloc_node+0x4e/0x1c0     [&lt;00000000d8e19b8a&gt;] kvmalloc_node+0x39/0x1f0     [&lt;00000000fc3eb5b8&gt;] run_add_entry+0x18a/0xa40 [ntfs3]     [&lt;0000000011c9f978&gt;] run_unpack+0x75d/0x8e0 [ntfs3]     [&lt;00000000e7cf1819&gt;] run_unpack_ex+0xbc/0x500 [ntfs3]     [&lt;00000000bbf0a43d&gt;] ntfs_iget5+0xb25/0x2dd0 [ntfs3]     [&lt;00000000a6e50693&gt;] ntfs_fill_super+0x218d/0x3580 [ntfs3]     [&lt;00000000b9170608&gt;] get_tree_bdev+0x3fb/0x710     [&lt;000000004833798a&gt;] vfs_get_tree+0x8e/0x280     [&lt;000000006e20b8e6&gt;] path_mount+0xf3c/0x1930     [&lt;000000007bf15a5f&gt;] do_mount+0xf3/0x110     ... Fix this by always setting is_root and NI_FLAG_DIR together.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-54077"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2929</id>
    <title>WID-SEC-W-2025-2929 — Linux Kernel: Mehrere Schwachstellen</title>
    <updated>2026-10-03T11:59:47.952361+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2929"/>
  </entry>
</feed>
