https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:42:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09446 bdu:2026-09446 https://cve.radiocsirt.org/vuln/bdu:2026-09446 https://cve.radiocsirt.org/vuln/bell-cve-2024-14027 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-14027 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0284 certfr-2026-avi-0284 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0284 https://cve.radiocsirt.org/vuln/euvd-2026-320530 EUVD-2026-320530 https://cve.radiocsirt.org/vuln/euvd-2026-320530 https://cve.radiocsirt.org/vuln/fkie_cve-2024-14027 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-14027 https://cve.radiocsirt.org/vuln/ghsa-h9jc-64qv-h9cg <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> https://cve.radiocsirt.org/vuln/ghsa-h9jc-64qv-h9cg https://cve.radiocsirt.org/vuln/msrc_cve-2024-14027 msrc_CVE-2024-14027 https://cve.radiocsirt.org/vuln/msrc_cve-2024-14027 https://cve.radiocsirt.org/vuln/oesa-2026-1642 <p><strong>Affected:</strong> openEuler:24.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&amp;quot;xattr: switch to CLASS(fd)&amp;quot;).(CVE-2024-14027)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pps: Fix a use-after-free</p> <p>On a board running ntpd and gpsd, I&amp;apos;m seeing a consistent use-after-free in sys_exit() from gpsd when rebooting:</p> <p>pps pps1: removed ------------[ cut here ]------------ kobject: &amp;apos;(null)&amp;apos; (00000000db4bec24): is not initialized, yet kobject_put() is being called. WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150 CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1 Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : kobject_put+0x120/0x150 lr : kobject_put+0x120/0x150 sp :…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es):</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/xattr: missing fdput() in fremovexattr error path</p> <p>In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&amp;quot;xattr: switch to CLASS(fd)&amp;quot;).(CVE-2024-14027)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pps: Fix a use-after-free</p> <p>On a board running ntpd and gpsd, I&amp;apos;m seeing a consistent use-after-free in sys_exit() from gpsd when rebooting:</p> <p>pps pps1: removed ------------[ cut here ]------------ kobject: &amp;apos;(null)&amp;apos; (00000000db4bec24): is not initialized, yet kobject_put() is being called. WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150 CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1 Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : kobject_put+0x120/0x150 lr : kobject_put+0x120/0x150 sp :…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1642 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20826-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20826-1 https://cve.radiocsirt.org/vuln/suse-su-2026:21834-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21834-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-14027 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 208 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 208 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 (&#34;xattr: switch to CLASS(fd)&#34;).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-14027 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0649 <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0649