https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:38:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04843 bdu:2021-04843 https://cve.radiocsirt.org/vuln/bdu:2021-04843 https://cve.radiocsirt.org/vuln/certfr-2021-avi-372 certfr-2021-avi-372 https://cve.radiocsirt.org/vuln/certfr-2021-avi-372 https://cve.radiocsirt.org/vuln/cnvd-2021-54394 cnvd-2021-54394 https://cve.radiocsirt.org/vuln/cnvd-2021-54394 https://cve.radiocsirt.org/vuln/euvd-2026-173614 EUVD-2026-173614 https://cve.radiocsirt.org/vuln/euvd-2026-173614 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3491 <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3491 https://cve.radiocsirt.org/vuln/ghsa-q4c9-gg27-f3pq <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> https://cve.radiocsirt.org/vuln/ghsa-q4c9-gg27-f3pq https://cve.radiocsirt.org/vuln/gsd-2021-3491 gsd-2021-3491 https://cve.radiocsirt.org/vuln/gsd-2021-3491 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0843-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0843-1 https://cve.radiocsirt.org/vuln/suse-su-2021:1887-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1887-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3491 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe and 7 more</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe and 7 more</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3491