https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:09:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15382 bdu:2025-15382 https://cve.radiocsirt.org/vuln/bdu:2025-15382 https://cve.radiocsirt.org/vuln/bell-cve-2023-4458 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-4458 https://cve.radiocsirt.org/vuln/cnvd-2024-45869 cnvd-2024-45869 https://cve.radiocsirt.org/vuln/cnvd-2024-45869 https://cve.radiocsirt.org/vuln/euvd-2026-201625 EUVD-2026-201625 https://cve.radiocsirt.org/vuln/euvd-2026-201625 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4458 <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4458 https://cve.radiocsirt.org/vuln/ghsa-gqjr-4mgj-g55g <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/ghsa-gqjr-4mgj-g55g https://cve.radiocsirt.org/vuln/gsd-2023-4458 gsd-2023-4458 https://cve.radiocsirt.org/vuln/gsd-2023-4458 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4458 msrc_CVE-2023-4458 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4458 https://cve.radiocsirt.org/vuln/oesa-2025-1963 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: act_ct: fix ref leak when switching zones</p> <p>When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That&amp;apos;s because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it.</p> <p>The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().(CVE-2022-49183)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: annotate races around sk-&amp;gt;sk_bound_dev_if</p> <p>UDP sendmsg() is lockless, and reads sk-&amp;gt;sk_bound_dev_if while this field can be changed by another thread.</p> <p>Adds minimal annotations to avoid KCSAN splats for UDP. Following patches will add more annotations to potential lockless readers.</p> <p>BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg</p> <p>write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0: __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221 ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272 inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576 __sys_connect_file net/socket.c:1900 [inline] __sys_connect+0x197/0x1b0 net/socket.c:1917 __do_sys_connect net/socket.c:1927 [inline] __se_sys_connect net/socket.c:1924 [inline] __x64_sys_connect+0x3d/0x50 net/socket.c:1924 do_syscall_x64 arch/x86/entry/common.c:50 [inline] d…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/sched: act_ct: fix ref leak when switching zones</p> <p>When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That&amp;apos;s because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it.</p> <p>The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().(CVE-2022-49183)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: annotate races around sk-&amp;gt;sk_bound_dev_if</p> <p>UDP sendmsg() is lockless, and reads sk-&amp;gt;sk_bound_dev_if while this field can be changed by another thread.</p> <p>Adds minimal annotations to avoid KCSAN splats for UDP. Following patches will add more annotations to potential lockless readers.</p> <p>BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg</p> <p>write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0: __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221 ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272 inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576 __sys_connect_file net/socket.c:1900 [inline] __sys_connect+0x197/0x1b0 net/socket.c:1917 __do_sys_connect net/socket.c:1927 [inline] __se_sys_connect net/socket.c:1924 [inline] __x64_sys_connect+0x3d/0x50 net/socket.c:1924 do_syscall_x64 arch/x86/entry/common.c:50 [inline] d…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1963 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4458 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 99 more</p> <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 99 more</p> <p>A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4458 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3462 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3462