https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:56:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00158 bdu:2025-00158 https://cve.radiocsirt.org/vuln/bdu:2025-00158 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0496 certfr-2024-avi-0496 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0496 https://cve.radiocsirt.org/vuln/euvd-2026-344440 EUVD-2026-344440 https://cve.radiocsirt.org/vuln/euvd-2026-344440 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47259 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47259 https://cve.radiocsirt.org/vuln/ghsa-w7j7-m99g-gcgq <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> https://cve.radiocsirt.org/vuln/ghsa-w7j7-m99g-gcgq https://cve.radiocsirt.org/vuln/suse-su-2024:2010-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2010-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-47259 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 100 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4_init_client() KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 100 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4_init_client() KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-47259 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1197 <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder unspezifische Angriffe durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder unspezifische Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1197