https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:50:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08040 bdu:2025-08040 https://cve.radiocsirt.org/vuln/bdu:2025-08040 https://cve.radiocsirt.org/vuln/bell-cve-2024-41074 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-41074 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0779 certfr-2024-avi-0779 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0779 https://cve.radiocsirt.org/vuln/euvd-2026-313003 EUVD-2026-313003 https://cve.radiocsirt.org/vuln/euvd-2026-313003 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41074 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachefiles: Set object to close if ondemand_id &lt; 0 in copen</p> <p>If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.</p> <p>Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.</p> <p>Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachefiles: Set object to close if ondemand_id &lt; 0 in copen</p> <p>If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.</p> <p>Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.</p> <p>Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41074 https://cve.radiocsirt.org/vuln/ghsa-vxvf-4cm8-pmg9 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachefiles: Set object to close if ondemand_id &lt; 0 in copen</p> <p>If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.</p> <p>Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.</p> <p>Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachefiles: Set object to close if ondemand_id &lt; 0 in copen</p> <p>If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.</p> <p>Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.</p> <p>Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> https://cve.radiocsirt.org/vuln/ghsa-vxvf-4cm8-pmg9 https://cve.radiocsirt.org/vuln/oesa-2024-1960 <p><strong>Affected:</strong> openEuler:24.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.(CVE-2024-33619) In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fpga region assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module&amp;apos;s refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the region during programming if the parent device does not have a driver. To address this problem, add a module owner pointer to the fpga_region struct and use it to take the module&amp;apos;s refcount. Modify the functions for registering a region to take an additional owner module parameter and rename them to avoid conflicts. Use the old function names for helper macros that automatically set the module that registers the region as the owner. This ensures compatibility with existing low…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: kernel</p> <p>The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.(CVE-2024-33619) In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fpga region assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module&amp;apos;s refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the region during programming if the parent device does not have a driver. To address this problem, add a module owner pointer to the fpga_region struct and use it to take the module&amp;apos;s refcount. Modify the functions for registering a region to take an additional owner module parameter and rename them to avoid conflicts. Use the old function names for helper macros that automatically set the module that registers the region as the owner. This ensures compatibility with existing low…</p> https://cve.radiocsirt.org/vuln/oesa-2024-1960 https://cve.radiocsirt.org/vuln/suse-su-2024:3194-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3194-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-41074 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 188 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id &lt; 0 in copen If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet. Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process. Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 188 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id &lt; 0 in copen If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet. Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process. Fix this issue by simply set object to close if its id &lt; 0 in copen.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-41074 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1722 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1722