https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:12:29 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:2459 <p><strong>Affected:</strong> AlmaLinux:9: device-mapper-multipath, AlmaLinux:9: device-mapper-multipath-devel, AlmaLinux:9: device-mapper-multipath-libs, AlmaLinux:9: kpartx</p> <p>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.</p> <p>Security Fix(es):</p> <p>* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: device-mapper-multipath, AlmaLinux:9: device-mapper-multipath-devel, AlmaLinux:9: device-mapper-multipath-libs, AlmaLinux:9: kpartx</p> <p>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.</p> <p>Security Fix(es):</p> <p>* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:2459 https://cve.radiocsirt.org/vuln/bdu:2023-09098 bdu:2023-09098 https://cve.radiocsirt.org/vuln/bdu:2023-09098 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0027 certfr-2024-avi-0027 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0027 https://cve.radiocsirt.org/vuln/euvd-2026-19556 EUVD-2026-19556 https://cve.radiocsirt.org/vuln/euvd-2026-19556 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41973 <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41973 https://cve.radiocsirt.org/vuln/ghsa-6c7c-85qv-wvgp <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> https://cve.radiocsirt.org/vuln/ghsa-6c7c-85qv-wvgp https://cve.radiocsirt.org/vuln/gsd-2022-41973 gsd-2022-41973 https://cve.radiocsirt.org/vuln/gsd-2022-41973 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41973 msrc_CVE-2022-41973 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41973 https://cve.radiocsirt.org/vuln/oesa-2022-2042 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: multipath-tools, openEuler:20.03-LTS-SP3: multipath-tools, openEuler:22.03-LTS: multipath-tools</p> <p>This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically,monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices. Security Fix(es): multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.(CVE-2022-41973)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: multipath-tools, openEuler:20.03-LTS-SP3: multipath-tools, openEuler:22.03-LTS: multipath-tools</p> <p>This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically,monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices. Security Fix(es): multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.(CVE-2022-41973)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2042 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12443-1 <p>kpartx-0.9.2+57+suse.cf3c1e9-1.1 on GA media</p> <p>kpartx-0.9.2+57+suse.cf3c1e9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12443-1 https://cve.radiocsirt.org/vuln/rhsa-2024:1110 <p>device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack</p> <p>device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1110 https://cve.radiocsirt.org/vuln/suse-su-2022:3707-1 <p>Security update for multipath-tools</p> <p>Security update for multipath-tools</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3707-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41973 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: multipath-tools, Ubuntu:22.04:LTS: multipath-tools</p> <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: multipath-tools, Ubuntu:22.04:LTS: multipath-tools</p> <p>multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41973 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185