Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:10:33 +0000 bdu:2026-02685 https://cve.radiocsirt.org/vuln/bdu:2026-02685 bdu:2026-02685 https://cve.radiocsirt.org/vuln/bdu:2026-02685 BELL-CVE-2025-39950 https://cve.radiocsirt.org/vuln/bell-cve-2025-39950 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-39950 certfr-2025-avi-1073 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… https://cve.radiocsirt.org/vuln/certfr-2025-avi-1073 certfr-2025-avi-1073 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1073 EUVD-2026-314837 https://cve.radiocsirt.org/vuln/euvd-2026-314837 EUVD-2026-314837 https://cve.radiocsirt.org/vuln/euvd-2026-314837 fkie_cve-2025-39950 https://cve.radiocsirt.org/vuln/fkie_cve-2025-39950 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR</p> <p>A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled.</p> <p>The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation.</p> <p>Fix this by checking if skb is NULL before dereferencing it.</p> <p>The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it.</p> <p>int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1;</p> <p>memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao));</p> <p>sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);</p> <p>sockaddr.sin_family = AF_INET;</p> <p>memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16;</p> <p>memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr));</p> <p>setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one));</p> <p>sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123);</p> <p>inet_aton("127.0.0.1", &sockaddr.sin_addr);</p> <p>connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr));</p> <p>return 0; }</p> <p>$ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn</p> <p>BUG: ke…</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR</p> <p>A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled.</p> <p>The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation.</p> <p>Fix this by checking if skb is NULL before dereferencing it.</p> <p>The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it.</p> <p>int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1;</p> <p>memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao));</p> <p>sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);</p> <p>sockaddr.sin_family = AF_INET;</p> <p>memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16;</p> <p>memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr));</p> <p>setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one));</p> <p>sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123);</p> <p>inet_aton("127.0.0.1", &sockaddr.sin_addr);</p> <p>connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr));</p> <p>return 0; }</p> <p>$ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn</p> <p>BUG: ke…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-39950 GHSA-f4h6-hf7g-852r https://cve.radiocsirt.org/vuln/ghsa-f4h6-hf7g-852r <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR</p> <p>A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled.</p> <p>The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation.</p> <p>Fix this by checking if skb is NULL before dereferencing it.</p> <p>The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it.</p> <p>int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1;</p> <p>memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao));</p> <p>sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);</p> <p>sockaddr.sin_family = AF_INET;</p> <p>memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16;</p> <p>memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr));</p> <p>setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one));</p> <p>sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123);</p> <p>inet_aton("127.0.0.1", &sockaddr.sin_addr);</p> <p>connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr));</p> <p>return 0; }</p> <p>$ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn</p> <p>BUG: ke…</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR</p> <p>A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled.</p> <p>The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation.</p> <p>Fix this by checking if skb is NULL before dereferencing it.</p> <p>The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it.</p> <p>int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1;</p> <p>memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao));</p> <p>sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);</p> <p>sockaddr.sin_family = AF_INET;</p> <p>memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16;</p> <p>memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr));</p> <p>setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one));</p> <p>sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123);</p> <p>inet_aton("127.0.0.1", &sockaddr.sin_addr);</p> <p>connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr));</p> <p>return 0; }</p> <p>$ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn</p> <p>BUG: ke…</p> https://cve.radiocsirt.org/vuln/ghsa-f4h6-hf7g-852r openSUSE-SU-2025:20091-1 — Security update for the Linux Kernel https://cve.radiocsirt.org/vuln/opensuse-su-2025:20091-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:20091-1 SUSE-SU-2025:21080-1 — Security update for the Linux Kernel https://cve.radiocsirt.org/vuln/suse-su-2025:21080-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21080-1 UBUNTU-CVE-2025-39950 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-39950 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 124 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled. The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation. Fix this by checking if skb is NULL before dereferencing it. The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it. int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1; memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao)); sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); sockaddr.sin_family = AF_INET; memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16; memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr)); setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one)); sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123); inet_aton("127.0.0.1", &sockaddr.sin_addr); connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr)); return 0; } $ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn BUG: kernel NULL pointer…</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 124 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled. The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation. Fix this by checking if skb is NULL before dereferencing it. The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it. int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1; memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao)); sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); sockaddr.sin_family = AF_INET; memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16; memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr)); setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one)); sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123); inet_aton("127.0.0.1", &sockaddr.sin_addr); connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr)); return 0; } $ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn BUG: kernel NULL pointer…</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-39950 WID-SEC-W-2025-2194 — Linux Kernel: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2194 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2194