https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:07:34.649439+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-18397 CVE-2018-18397 2026-10-07T02:07:34.652867+00:00

The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.

 https://cve.radiocsirt.org/vuln/usn-3901-1 USN-3901-1 — linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-oracle, linux-raspi2 vulnerabilities 2026-10-07T02:07:34.652916+00:00

Affected: Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem, Ubuntu:18.04:LTS: linux-oracle, Ubuntu:18.04:LTS: linux-raspi2

Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397)

It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854)

Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)