https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:08:04.102432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-49503 CVE-2022-49503 — ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix 2026-10-09T17:08:04.143098+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

The "rxstatus->rs_keyix" eventually gets passed to test_bit() so we need to ensure that it is within the bitmap.

drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept() error: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'

 https://cve.radiocsirt.org/vuln/rhsa-2026:2573 RHSA-2026:2573 — Red Hat Security Advisory: kernel security update 2026-10-09T17:08:04.143170+00:00

kernel: Linux kernel: ath9k_htc out-of-bounds access vulnerability kernel: ext4: fix use-after-free in ext4_orphan_cleanup kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() kernel: Linux kernel: Out-of-bounds write in VXLAN due to incorrect nexthop hash size leading to denial of service kernel: Bluetooth: hci_event: call disconnect callback before deleting conn kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service kernel: drm/i915: Fix NULL ptr deref by checking new_crtc_state kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling kernel: net: atlantic: fix fragment overflow handling in RX path