https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:55:51 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-68262 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-68262 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/euvd-2026-353523 EUVD-2026-353523 https://cve.radiocsirt.org/vuln/euvd-2026-353523 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68262 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/imagination: Fix user array stride in pvr_set_uobj_array()</p> <p>pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride.</p> <p>This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element.</p> <p>Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/imagination: Fix user array stride in pvr_set_uobj_array()</p> <p>pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride.</p> <p>This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element.</p> <p>Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-68262 https://cve.radiocsirt.org/vuln/ghsa-8f87-qjgg-4j6v <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/imagination: Fix user array stride in pvr_set_uobj_array()</p> <p>pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride.</p> <p>This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element.</p> <p>Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/imagination: Fix user array stride in pvr_set_uobj_array()</p> <p>pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride.</p> <p>This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element.</p> <p>Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> https://cve.radiocsirt.org/vuln/ghsa-8f87-qjgg-4j6v https://cve.radiocsirt.org/vuln/opensuse-su-2026:21910-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21910-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23881-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23881-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68262 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride. This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element. Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out-&gt;stride. When out-&gt;stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride. This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element. Advance the userspace pointer by out-&gt;stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68262 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730