https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:11:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01835 bdu:2021-01835 https://cve.radiocsirt.org/vuln/bdu:2021-01835 https://cve.radiocsirt.org/vuln/certfr-2021-avi-217 certfr-2021-avi-217 https://cve.radiocsirt.org/vuln/certfr-2021-avi-217 https://cve.radiocsirt.org/vuln/cnvd-2021-28714 cnvd-2021-28714 https://cve.radiocsirt.org/vuln/cnvd-2021-28714 https://cve.radiocsirt.org/vuln/euvd-2026-165954 EUVD-2026-165954 https://cve.radiocsirt.org/vuln/euvd-2026-165954 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3444 <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3444 https://cve.radiocsirt.org/vuln/ghsa-c55x-85rg-x529 <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> https://cve.radiocsirt.org/vuln/ghsa-c55x-85rg-x529 https://cve.radiocsirt.org/vuln/gsd-2021-3444 gsd-2021-3444 https://cve.radiocsirt.org/vuln/gsd-2021-3444 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3444 msrc_CVE-2021-3444 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3444 https://cve.radiocsirt.org/vuln/oesa-2021-1176 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.(CVE-2020-27170)</p> <p>An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.(CVE-2020-27171)</p> <p>rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -&amp;gt;ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.(CVE-2021-28660)</p> <p>A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.(CVE-2021-28964)</p> <p>In dri…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.(CVE-2020-27170)</p> <p>An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.(CVE-2020-27171)</p> <p>rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -&amp;gt;ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.(CVE-2021-28660)</p> <p>A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.(CVE-2021-28964)</p> <p>In dri…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1176 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0532-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0532-1 https://cve.radiocsirt.org/vuln/suse-su-2021:1175-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1175-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3444 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.3, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4 and 39 more</p> <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.3, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4 and 39 more</p> <p>The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (&#34;bpf: Fix truncation handling for mod32 dst reg wrt zero&#34;) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3444