https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:48:07.728291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373062 EUVD-2026-373062 2026-10-03T02:48:07.732334+00:00 EUVD-2026-373062 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6862 fkie_cve-2026-6862 2026-10-03T02:48:07.732379+00:00

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).

 https://cve.radiocsirt.org/vuln/ghsa-364h-vxjm-52rp GHSA-364h-vxjm-52rp 2026-10-03T02:48:07.732418+00:00

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).

 https://cve.radiocsirt.org/vuln/rhsa-2026:69321 RHSA-2026:69321 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-03T02:48:07.732439+00:00

efivar: efivar: Denial of Service due to stack overflow in device path node parsing

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6862 UBUNTU-CVE-2026-6862 2026-10-03T02:48:07.732459+00:00

Affected: Ubuntu:14.04:LTS: efivar, Ubuntu:16.04:LTS: efivar, Ubuntu:18.04:LTS: efivar, Ubuntu:20.04:LTS: efivar, Ubuntu:22.04:LTS: efivar, Ubuntu:24.04:LTS: efivar, Ubuntu:25.10: efivar, Ubuntu:26.04:LTS: efivar

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).