https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:03:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03656 bdu:2023-03656 https://cve.radiocsirt.org/vuln/bdu:2023-03656 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0626 certfr-2023-avi-0626 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0626 https://cve.radiocsirt.org/vuln/cnvd-2023-56642 cnvd-2023-56642 https://cve.radiocsirt.org/vuln/cnvd-2023-56642 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3117 <p>Rejected reason: Duplicate of CVE-2023-3390.</p> <p>Rejected reason: Duplicate of CVE-2023-3390.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3117 https://cve.radiocsirt.org/vuln/ghsa-vmqj-8947-67ch <p>A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.</p> <p>A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-vmqj-8947-67ch https://cve.radiocsirt.org/vuln/gsd-2023-3117 gsd-2023-3117 https://cve.radiocsirt.org/vuln/gsd-2023-3117 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3117 msrc_CVE-2023-3117 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3117 https://cve.radiocsirt.org/vuln/oesa-2023-1435 <p><strong>Affected:</strong> openEuler:22.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself.</p> <p>Security Fix(es):</p> <p>A time-of-check to time-of-use issue exists in io_uring subsystem&amp;apos;s IORING_OP_CLOSE operation in the Linux kernel&amp;apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)</p> <p>A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.</p> <p>The out-of-bounds write is caused by missing skb-&amp;gt;cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.</p> <p>We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.</p> <p>(CVE-2023-3090)</p> <p>A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)</p> <p>Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)</p> <p>An issue was discovered in the Linux kerne…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself.</p> <p>Security Fix(es):</p> <p>A time-of-check to time-of-use issue exists in io_uring subsystem&amp;apos;s IORING_OP_CLOSE operation in the Linux kernel&amp;apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)</p> <p>A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.</p> <p>The out-of-bounds write is caused by missing skb-&amp;gt;cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.</p> <p>We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.</p> <p>(CVE-2023-3090)</p> <p>A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)</p> <p>Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)</p> <p>An issue was discovered in the Linux kerne…</p> https://cve.radiocsirt.org/vuln/oesa-2023-1435 https://cve.radiocsirt.org/vuln/suse-su-2023:3172-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3172-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3117 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-kvm and 87 more</p> <p>Rejected reason: Duplicate of CVE-2023-3390.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-kvm and 87 more</p> <p>Rejected reason: Duplicate of CVE-2023-3390.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3117 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1627 <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1627