https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:00:49 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-68151 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-68151 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/euvd-2026-356040 EUVD-2026-356040 https://cve.radiocsirt.org/vuln/euvd-2026-356040 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68151 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-68151 https://cve.radiocsirt.org/vuln/ghsa-vrxm-q8gm-fcvq <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> https://cve.radiocsirt.org/vuln/ghsa-vrxm-q8gm-fcvq https://cve.radiocsirt.org/vuln/msrc_cve-2026-68151 msrc_CVE-2026-68151 https://cve.radiocsirt.org/vuln/msrc_cve-2026-68151 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68151 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs. An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here. The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs. An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here. The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68151 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730