https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:26:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01734 bdu:2023-01734 https://cve.radiocsirt.org/vuln/bdu:2023-01734 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0726 certfr-2023-avi-0726 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0726 https://cve.radiocsirt.org/vuln/euvd-2026-219299 EUVD-2026-219299 https://cve.radiocsirt.org/vuln/euvd-2026-219299 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48425 <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-48425 https://cve.radiocsirt.org/vuln/ghsa-89mg-6p9g-4jfj <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> https://cve.radiocsirt.org/vuln/ghsa-89mg-6p9g-4jfj https://cve.radiocsirt.org/vuln/gsd-2022-48425 gsd-2022-48425 https://cve.radiocsirt.org/vuln/gsd-2022-48425 https://cve.radiocsirt.org/vuln/msrc_cve-2022-48425 msrc_CVE-2022-48425 https://cve.radiocsirt.org/vuln/msrc_cve-2022-48425 https://cve.radiocsirt.org/vuln/oesa-2023-1188 <p><strong>Affected:</strong> openEuler:22.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es): When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.(CVE-2022-27672) A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.(CVE-2023-1079) In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).(CVE-2023-23004) A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 (&amp;quot;coredump: Use the vma snapshot in fill_files_note&amp;quot;) not applied yet, then kernel could be affected.(CVE-2023-1249)</p> <p>Kernel: denial of service in tipc_conn_close(CVE-2023-1382) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es): When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.(CVE-2022-27672) A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.(CVE-2023-1079) In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).(CVE-2023-23004) A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 (&amp;quot;coredump: Use the vma snapshot in fill_files_note&amp;quot;) not applied yet, then kernel could be affected.(CVE-2023-1249)</p> <p>Kernel: denial of service in tipc_conn_close(CVE-2023-1382) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading…</p> https://cve.radiocsirt.org/vuln/oesa-2023-1188 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48425 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 83 more</p> <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 83 more</p> <p>In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48425 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0680 <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0680