Most recent entries from all

bdu:2023-01122

2026-10-05T17:40:18.725950+00:00

bdu:2023-01122

Withdrawn: BELL-CVE-2023-26544 — CVE-2023-26544 does not affect BellSoft software

2026-10-05T17:40:18.725990+00:00

Withdrawn by the publisher.

certfr-2023-avi-0394 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permett…

2026-10-05T17:40:18.726010+00:00

certfr-2023-avi-0394

EUVD-2026-237264

2026-10-05T17:40:18.726027+00:00

EUVD-2026-237264

fkie_cve-2023-26544

2026-10-05T17:40:18.726039+00:00

In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.

GHSA-hh6r-xc8x-f53f

2026-10-05T17:40:18.726067+00:00

In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.

gsd-2023-26544

2026-10-05T17:40:18.726082+00:00

gsd-2023-26544

OESA-2023-1284 — kernel security update

2026-10-05T17:40:18.726093+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP3: kernel, openEuler:22.03-LTS: kernel, openEuler:22.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.(CVE-2023-2002) A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11(CVE-2023-0458) In emac_probe, &adpt->work_thread is bound with emac_work_thread. Then it will be started by timeout handler emac_tx_timeout or a IRQ handler emac_isr. If we remove the driver which will call emac_remove to make cleanup, there may be a unfinished work. This could lead to a use-after-free. Upstream fix: https://github.com/torvalds/linux/commit/6b6bc5b8bd2d(CVE-2023-2483) An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.(CVE-2…

UBUNTU-CVE-2023-26544

2026-10-05T17:40:18.726141+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 65 more

In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.

WID-SEC-W-2023-0481 — Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

2026-10-05T17:40:18.726261+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.