https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:25:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01326 bdu:2020-01326 https://cve.radiocsirt.org/vuln/bdu:2020-01326 https://cve.radiocsirt.org/vuln/certfr-2019-avi-555 certfr-2019-avi-555 https://cve.radiocsirt.org/vuln/certfr-2019-avi-555 https://cve.radiocsirt.org/vuln/cnvd-2019-42782 cnvd-2019-42782 https://cve.radiocsirt.org/vuln/cnvd-2019-42782 https://cve.radiocsirt.org/vuln/euvd-2026-176540 EUVD-2026-176540 https://cve.radiocsirt.org/vuln/euvd-2026-176540 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15792 <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-15792 https://cve.radiocsirt.org/vuln/ghsa-rx63-pxf9-gqg8 <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-rx63-pxf9-gqg8 https://cve.radiocsirt.org/vuln/gsd-2019-15792 gsd-2019-15792 https://cve.radiocsirt.org/vuln/gsd-2019-15792 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-15792 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop, Ubuntu:20.04:LTS: linux-gkeop-5.15, Ubuntu:20.04:LTS: linux-raspi2, Ubuntu:20.04:LTS: linux-riscv and 4 more</p> <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop, Ubuntu:20.04:LTS: linux-gkeop-5.15, Ubuntu:20.04:LTS: linux-raspi2, Ubuntu:20.04:LTS: linux-riscv and 4 more</p> <p>In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file-&gt;private_data, a void* that points to a filesystem-dependent type, to a &#34;struct shiftfs_file_info *&#34;. As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-15792