https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:27:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12311 bdu:2026-12311 https://cve.radiocsirt.org/vuln/bdu:2026-12311 https://cve.radiocsirt.org/vuln/bell-cve-2026-23298 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-23298 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/euvd-2026-315454 EUVD-2026-315454 https://cve.radiocsirt.org/vuln/euvd-2026-315454 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23298 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23298 https://cve.radiocsirt.org/vuln/ghsa-v7rc-q48q-f2p3 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> https://cve.radiocsirt.org/vuln/ghsa-v7rc-q48q-f2p3 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23298 msrc_CVE-2026-23298 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23298 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20826-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20826-1 https://cve.radiocsirt.org/vuln/suse-su-2026:21834-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21834-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23298 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 205 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one. This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 205 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one. This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23298 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0861 <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, weitere nicht spezifizierte Auswirkungen zu verursachen und potentiell Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, weitere nicht spezifizierte Auswirkungen zu verursachen und potentiell Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0861