https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:09:05 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-43435 <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-43435 https://cve.radiocsirt.org/vuln/euvd-2026-315945 EUVD-2026-315945 https://cve.radiocsirt.org/vuln/euvd-2026-315945 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43435 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>rust_binder: fix oneway spam detection</p> <p>The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted.</p> <p>Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange.</p> <p>Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>rust_binder: fix oneway spam detection</p> <p>The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted.</p> <p>Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange.</p> <p>Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-43435 https://cve.radiocsirt.org/vuln/ghsa-267q-r86j-cvg7 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>rust_binder: fix oneway spam detection</p> <p>The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted.</p> <p>Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange.</p> <p>Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>rust_binder: fix oneway spam detection</p> <p>The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted.</p> <p>Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange.</p> <p>Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> https://cve.radiocsirt.org/vuln/ghsa-267q-r86j-cvg7 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43435 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 85 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted. Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange. Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 85 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted. Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange. Note that I looked into centralizing this logic in RangeAllocator but iterating through &#39;state&#39; and &#39;size&#39; got a bit too complicated (for me) and I abandoned this effort.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43435 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1454 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1454