https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:10:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-082 certfr-2016-avi-082 https://cve.radiocsirt.org/vuln/certfr-2016-avi-082 https://cve.radiocsirt.org/vuln/cnvd-2016-01836 cnvd-2016-01836 https://cve.radiocsirt.org/vuln/cnvd-2016-01836 https://cve.radiocsirt.org/vuln/euvd-2026-81544 EUVD-2026-81544 https://cve.radiocsirt.org/vuln/euvd-2026-81544 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0774 <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0774 https://cve.radiocsirt.org/vuln/ghsa-qc32-8fv3-qwvw <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> https://cve.radiocsirt.org/vuln/ghsa-qc32-8fv3-qwvw https://cve.radiocsirt.org/vuln/gsd-2016-0774 gsd-2016-0774 https://cve.radiocsirt.org/vuln/gsd-2016-0774 https://cve.radiocsirt.org/vuln/rhsa-2015:2152 <p>kernel: kvm: reporting emulation failures to userspace kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: noncanonical rip after emulation kernel: kvm: reporting emulation failures to userspace kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code Kernel: vfs: Do not allow escaping from bind mounts kernel: zero page memory arbitrary modification kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn&#39;t loaded leads to kernel panic kernel: perf on ppc64 can loop forever getting userlevel stacktraces kernel: nfnetlink race in NETLINK_NFLOG socket creation kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec kernel: MTU value is not validated in IPv6 stack causing packet loss kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> <p>kernel: kvm: reporting emulation failures to userspace kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: noncanonical rip after emulation kernel: kvm: reporting emulation failures to userspace kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code Kernel: vfs: Do not allow escaping from bind mounts kernel: zero page memory arbitrary modification kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn&#39;t loaded leads to kernel panic kernel: perf on ppc64 can loop forever getting userlevel stacktraces kernel: nfnetlink race in NETLINK_NFLOG socket creation kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec kernel: MTU value is not validated in IPv6 stack causing packet loss kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2152 https://cve.radiocsirt.org/vuln/rhsa-2016:0103 <p>virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception kernel: Possible use-after-free vulnerability in keyring facility kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> <p>virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception kernel: Possible use-after-free vulnerability in keyring facility kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0103 https://cve.radiocsirt.org/vuln/suse-su-2016:0785-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0785-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0774 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an &#34;I/O vector array overrun.&#34; NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0774