https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:37:04 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-656 certa-2013-avi-656 https://cve.radiocsirt.org/vuln/certa-2013-avi-656 https://cve.radiocsirt.org/vuln/euvd-2026-107541 EUVD-2026-107541 https://cve.radiocsirt.org/vuln/euvd-2026-107541 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4470 <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4470 https://cve.radiocsirt.org/vuln/ghsa-rjcc-mch5-73qc <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> https://cve.radiocsirt.org/vuln/ghsa-rjcc-mch5-73qc https://cve.radiocsirt.org/vuln/gsd-2013-4470 gsd-2013-4470 https://cve.radiocsirt.org/vuln/gsd-2013-4470 https://cve.radiocsirt.org/vuln/rhsa-2013:1801 <p>Kernel: signal: information leak in tkill/tgkill Kernel: net: memory corruption with UDP_CORK and UFO kvm: division by zero in apic_get_tmcct() kvm: cross page vapic_addr access</p> <p>Kernel: signal: information leak in tkill/tgkill Kernel: net: memory corruption with UDP_CORK and UFO kvm: division by zero in apic_get_tmcct() kvm: cross page vapic_addr access</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1801 https://cve.radiocsirt.org/vuln/suse-ru-2015:0621-1 <p>Security update for Linux kernel</p> <p>Security update for Linux kernel</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0621-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4470 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-gke, Ubuntu:16.04:LTS: linux-hwe and 2 more</p> <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-gke, Ubuntu:16.04:LTS: linux-hwe and 2 more</p> <p>The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4470