Most recent entries from all

certfr-2026-avi-0942 — De multiples vulnérabilités ont été découvertes dans Xen. Certaines d'entre elles permettent à un attaquant de provoque…

2026-10-02T21:53:31.798058+00:00

certfr-2026-avi-0942

EUVD-2026-342096

2026-10-02T21:53:31.798099+00:00

EUVD-2026-342096

fkie_cve-2026-62425

2026-10-02T21:53:31.798114+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:

* The directory loop itself assumes a good record length. This is CVE-2026-42494.

* The calculation of the System Use area may underflow. This is CVE-2026-42495.

* The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423.

* The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424.

* The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425.

GHSA-r2qc-jvxx-r42q

2026-10-02T21:53:31.798152+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:

* The directory loop itself assumes a good record length. This is CVE-2026-42494.

* The calculation of the System Use area may underflow. This is CVE-2026-42495.

* The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423.

* The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424.

* The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425.

SUSE-SU-2026:3409-1 — Security update for xen

2026-10-02T21:53:31.798175+00:00

Security update for xen

UBUNTU-CVE-2026-62425

2026-10-02T21:53:31.798199+00:00

Affected: Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:26.04:LTS: xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them: * The directory loop itself assumes a good record length. This is CVE-2026-42494. * The calculation of the System Use area may underflow. This is CVE-2026-42495. * The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423. * The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424. * The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425.

WID-SEC-W-2026-2568 — Xen: Mehrere Schwachstellen

2026-10-02T21:53:31.798231+00:00

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.