https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:44:51 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-68317 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-68317 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/euvd-2026-353556 EUVD-2026-353556 https://cve.radiocsirt.org/vuln/euvd-2026-353556 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68317 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-68317 https://cve.radiocsirt.org/vuln/ghsa-gg5r-cw5w-f3jw <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> https://cve.radiocsirt.org/vuln/ghsa-gg5r-cw5w-f3jw https://cve.radiocsirt.org/vuln/msrc_cve-2026-68317 msrc_CVE-2026-68317 https://cve.radiocsirt.org/vuln/msrc_cve-2026-68317 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68317 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68317 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730