https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:58:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00974 bdu:2019-00974 https://cve.radiocsirt.org/vuln/bdu:2019-00974 https://cve.radiocsirt.org/vuln/certfr-2019-avi-213 certfr-2019-avi-213 https://cve.radiocsirt.org/vuln/certfr-2019-avi-213 https://cve.radiocsirt.org/vuln/cnvd-2018-26906 cnvd-2018-26906 https://cve.radiocsirt.org/vuln/cnvd-2018-26906 https://cve.radiocsirt.org/vuln/euvd-2026-69342 EUVD-2026-69342 https://cve.radiocsirt.org/vuln/euvd-2026-69342 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18559 <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-18559 https://cve.radiocsirt.org/vuln/ghsa-8w88-57v8-p48h <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> https://cve.radiocsirt.org/vuln/ghsa-8w88-57v8-p48h https://cve.radiocsirt.org/vuln/gsd-2018-18559 gsd-2018-18559 https://cve.radiocsirt.org/vuln/gsd-2018-18559 https://cve.radiocsirt.org/vuln/rhsa-2019:0163 <p>kernel: userfaultfd bypasses tmpfs file permissions kernel: Use-after-free due to race condition in AF_PACKET implementation</p> <p>kernel: userfaultfd bypasses tmpfs file permissions kernel: Use-after-free due to race condition in AF_PACKET implementation</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0163 https://cve.radiocsirt.org/vuln/rhsa-2019:0188 <p>kernel: Use-after-free due to race condition in AF_PACKET implementation</p> <p>kernel: Use-after-free due to race condition in AF_PACKET implementation</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0188 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18559 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-kvm, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon and 9 more</p> <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-kvm, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon and 9 more</p> <p>In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18559