https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:46:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00853 bdu:2020-00853 https://cve.radiocsirt.org/vuln/bdu:2020-00853 https://cve.radiocsirt.org/vuln/certfr-2020-avi-096 certfr-2020-avi-096 https://cve.radiocsirt.org/vuln/certfr-2020-avi-096 https://cve.radiocsirt.org/vuln/cnvd-2020-22825 cnvd-2020-22825 https://cve.radiocsirt.org/vuln/cnvd-2020-22825 https://cve.radiocsirt.org/vuln/euvd-2026-59159 EUVD-2026-59159 https://cve.radiocsirt.org/vuln/euvd-2026-59159 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19241 <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19241 https://cve.radiocsirt.org/vuln/ghsa-wxfp-qr5h-g4wx <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> https://cve.radiocsirt.org/vuln/ghsa-wxfp-qr5h-g4wx https://cve.radiocsirt.org/vuln/gsd-2019-19241 gsd-2019-19241 https://cve.radiocsirt.org/vuln/gsd-2019-19241 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19241 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-5.3, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-raspi2-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde and 8 more</p> <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-5.3, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-raspi2-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde and 8 more</p> <p>In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19241 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1180 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um Administratorrechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder um nicht spezifizierte Auswirkungen zu erzielen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um Administratorrechte zu erlangen, einen Denial of Service Zustand herbeizuführen oder um nicht spezifizierte Auswirkungen zu erzielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1180