https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:26:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15179 bdu:2025-15179 https://cve.radiocsirt.org/vuln/bdu:2025-15179 https://cve.radiocsirt.org/vuln/bell-cve-2025-38608 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-38608 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0787 certfr-2025-avi-0787 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0787 https://cve.radiocsirt.org/vuln/euvd-2026-347125 EUVD-2026-347125 https://cve.radiocsirt.org/vuln/euvd-2026-347125 https://cve.radiocsirt.org/vuln/fkie_cve-2025-38608 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls</p> <p>When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length.</p> <p>This results in transmitting buffers containing uninitialized data during ciphertext transmission.</p> <p>This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls</p> <p>When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length.</p> <p>This results in transmitting buffers containing uninitialized data during ciphertext transmission.</p> <p>This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-38608 https://cve.radiocsirt.org/vuln/ghsa-j92m-g7g3-p573 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls</p> <p>When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length.</p> <p>This results in transmitting buffers containing uninitialized data during ciphertext transmission.</p> <p>This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls</p> <p>When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length.</p> <p>This results in transmitting buffers containing uninitialized data during ciphertext transmission.</p> <p>This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> https://cve.radiocsirt.org/vuln/ghsa-j92m-g7g3-p573 https://cve.radiocsirt.org/vuln/msrc_cve-2025-38608 msrc_CVE-2025-38608 https://cve.radiocsirt.org/vuln/msrc_cve-2025-38608 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20081-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:20081-1 https://cve.radiocsirt.org/vuln/suse-su-2025:03272-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2025:03272-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-38608 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 187 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length. This results in transmitting buffers containing uninitialized data during ciphertext transmission. This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 187 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length. This results in transmitting buffers containing uninitialized data during ciphertext transmission. This causes uninitialized bytes to be appended after a complete &#34;Application Data&#34; packet, leading to errors on the receiving end when parsing TLS record.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-38608 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1869 <p>Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1869