https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:20:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11321 bdu:2026-11321 https://cve.radiocsirt.org/vuln/bdu:2026-11321 https://cve.radiocsirt.org/vuln/bell-cve-2026-31478 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-31478 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0547 certfr-2026-avi-0547 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0547 https://cve.radiocsirt.org/vuln/euvd-2026-347696 EUVD-2026-347696 https://cve.radiocsirt.org/vuln/euvd-2026-347696 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31478 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()</p> <p>After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()</p> <p>After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31478 https://cve.radiocsirt.org/vuln/ghsa-hjcf-h98x-x745 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()</p> <p>After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()</p> <p>After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> https://cve.radiocsirt.org/vuln/ghsa-hjcf-h98x-x745 https://cve.radiocsirt.org/vuln/msrc_cve-2026-31478 msrc_CVE-2026-31478 https://cve.radiocsirt.org/vuln/msrc_cve-2026-31478 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31478 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 175 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 175 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5c9 &#34;ksmbd: add support for read compound&#34;), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of -&gt;Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31478 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252