https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:15:49.100238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-80755 BELL-CVE-2026-80755 2026-10-09T21:15:49.112322+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1253 certfr-2026-avi-1253 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un… 2026-10-09T21:15:49.112379+00:00 certfr-2026-avi-1253 https://cve.radiocsirt.org/vuln/euvd-2026-363386 EUVD-2026-363386 2026-10-09T21:15:49.112399+00:00 EUVD-2026-363386 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80755 fkie_cve-2026-80755 2026-10-09T21:15:49.112411+00:00

In the Linux kernel, the following vulnerability has been resolved:

selinux: reject a permission value exceeding the class permission count

perm_read() bounds a permission value by SEL_VEC_MAX but never by the nprim of the owning class or common, which is taken verbatim from the policy image. security_get_permissions() then writes perms[value - 1] into an nprim-sized kcalloc() array, so a class declaring fewer permissions than its largest permission value drives an out-of-bounds heap write. The top-level symbol tables are validated this way; the nested per-class permission table is not.

Reject a permission whose value exceeds nprim, which is already set when perm_read() runs. Well-formed policies are unaffected.

[PM: tweak comment for line length]

 https://cve.radiocsirt.org/vuln/ghsa-jcj2-5fhp-x66j GHSA-jcj2-5fhp-x66j 2026-10-09T21:15:49.112441+00:00

In the Linux kernel, the following vulnerability has been resolved:

selinux: reject a permission value exceeding the class permission count

perm_read() bounds a permission value by SEL_VEC_MAX but never by the nprim of the owning class or common, which is taken verbatim from the policy image. security_get_permissions() then writes perms[value - 1] into an nprim-sized kcalloc() array, so a class declaring fewer permissions than its largest permission value drives an out-of-bounds heap write. The top-level symbol tables are validated this way; the nested per-class permission table is not.

Reject a permission whose value exceeds nprim, which is already set when perm_read() runs. Well-formed policies are unaffected.

[PM: tweak comment for line length]

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-80755 msrc_CVE-2026-80755 — selinux: reject a permission value exceeding the class permission count 2026-10-09T21:15:49.112462+00:00 msrc_CVE-2026-80755 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80755 UBUNTU-CVE-2026-80755 2026-10-09T21:15:49.112477+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 247 more

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count perm_read() bounds a permission value by SEL_VEC_MAX but never by the nprim of the owning class or common, which is taken verbatim from the policy image. security_get_permissions() then writes perms[value - 1] into an nprim-sized kcalloc() array, so a class declaring fewer permissions than its largest permission value drives an out-of-bounds heap write. The top-level symbol tables are validated this way; the nested per-class permission table is not. Reject a permission whose value exceeds nprim, which is already set when perm_read() runs. Well-formed policies are unaffected. [PM: tweak comment for line length]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3152 WID-SEC-W-2026-3152 — Linux Kernel: Mehrere Schwachstellen 2026-10-09T21:15:49.112732+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschriebene Auswirkungen zu erzielen.