https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:05:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15009 bdu:2025-15009 https://cve.radiocsirt.org/vuln/bdu:2025-15009 https://cve.radiocsirt.org/vuln/bell-cve-2023-39179 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-39179 https://cve.radiocsirt.org/vuln/cnvd-2024-45870 cnvd-2024-45870 https://cve.radiocsirt.org/vuln/cnvd-2024-45870 https://cve.radiocsirt.org/vuln/euvd-2026-202309 EUVD-2026-202309 https://cve.radiocsirt.org/vuln/euvd-2026-202309 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39179 <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-39179 https://cve.radiocsirt.org/vuln/ghsa-jq6r-jfg5-r4xg <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/ghsa-jq6r-jfg5-r4xg https://cve.radiocsirt.org/vuln/gsd-2023-39179 gsd-2023-39179 https://cve.radiocsirt.org/vuln/gsd-2023-39179 https://cve.radiocsirt.org/vuln/oesa-2025-1963 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: act_ct: fix ref leak when switching zones</p> <p>When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That&amp;apos;s because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it.</p> <p>The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().(CVE-2022-49183)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: annotate races around sk-&amp;gt;sk_bound_dev_if</p> <p>UDP sendmsg() is lockless, and reads sk-&amp;gt;sk_bound_dev_if while this field can be changed by another thread.</p> <p>Adds minimal annotations to avoid KCSAN splats for UDP. Following patches will add more annotations to potential lockless readers.</p> <p>BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg</p> <p>write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0: __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221 ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272 inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576 __sys_connect_file net/socket.c:1900 [inline] __sys_connect+0x197/0x1b0 net/socket.c:1917 __do_sys_connect net/socket.c:1927 [inline] __se_sys_connect net/socket.c:1924 [inline] __x64_sys_connect+0x3d/0x50 net/socket.c:1924 do_syscall_x64 arch/x86/entry/common.c:50 [inline] d…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: act_ct: fix ref leak when switching zones</p> <p>When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That&amp;apos;s because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it.</p> <p>The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().(CVE-2022-49183)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: annotate races around sk-&amp;gt;sk_bound_dev_if</p> <p>UDP sendmsg() is lockless, and reads sk-&amp;gt;sk_bound_dev_if while this field can be changed by another thread.</p> <p>Adds minimal annotations to avoid KCSAN splats for UDP. Following patches will add more annotations to potential lockless readers.</p> <p>BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg</p> <p>write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0: __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221 ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272 inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576 __sys_connect_file net/socket.c:1900 [inline] __sys_connect+0x197/0x1b0 net/socket.c:1917 __do_sys_connect net/socket.c:1927 [inline] __se_sys_connect net/socket.c:1924 [inline] __x64_sys_connect+0x3d/0x50 net/socket.c:1924 do_syscall_x64 arch/x86/entry/common.c:50 [inline] d…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1963 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39179 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 159 more</p> <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 159 more</p> <p>A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39179