https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:58:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-128862 EUVD-2026-128862 https://cve.radiocsirt.org/vuln/euvd-2026-128862 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3833 <p>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</p> <p>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-3833 https://cve.radiocsirt.org/vuln/ghsa-qwxw-cr32-mppw <p>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</p> <p>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</p> https://cve.radiocsirt.org/vuln/ghsa-qwxw-cr32-mppw https://cve.radiocsirt.org/vuln/gsd-2008-3833 gsd-2008-3833 https://cve.radiocsirt.org/vuln/gsd-2008-3833 https://cve.radiocsirt.org/vuln/rhsa-2008:0957 <p>kernel: local denial of service due to NT bit leakage kernel-xen 3.1.1 does not prevent modification of the CR4 TSC from applications (DoS possible) kernel: Reinstate ZERO_PAGE optimization in &#39;get_user_pages()&#39; and fix XIP Linux kernel dccp_setsockopt_change() integer overflow kernel: missing boundary checks in syscall/syscall32_nopage() kernel: remove SUID when splicing into an inode kernel: open() call allows setgid bit when user is not in new file&#39;s group kernel: splice: fix bad unlock_page() in error case</p> <p>kernel: local denial of service due to NT bit leakage kernel-xen 3.1.1 does not prevent modification of the CR4 TSC from applications (DoS possible) kernel: Reinstate ZERO_PAGE optimization in &#39;get_user_pages()&#39; and fix XIP Linux kernel dccp_setsockopt_change() integer overflow kernel: missing boundary checks in syscall/syscall32_nopage() kernel: remove SUID when splicing into an inode kernel: open() call allows setgid bit when user is not in new file&#39;s group kernel: splice: fix bad unlock_page() in error case</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0957