https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:29:56 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-68350 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-68350 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1069 https://cve.radiocsirt.org/vuln/euvd-2026-356249 EUVD-2026-356249 https://cve.radiocsirt.org/vuln/euvd-2026-356249 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68350 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: fix OOB read from off-by-two in TX status handler</p> <p>The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: fix OOB read from off-by-two in TX status handler</p> <p>The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-68350 https://cve.radiocsirt.org/vuln/ghsa-wg7x-4p3f-2w22 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: fix OOB read from off-by-two in TX status handler</p> <p>The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: fix OOB read from off-by-two in TX status handler</p> <p>The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> https://cve.radiocsirt.org/vuln/ghsa-wg7x-4p3f-2w22 https://cve.radiocsirt.org/vuln/msrc_cve-2026-68350 msrc_CVE-2026-68350 https://cve.radiocsirt.org/vuln/msrc_cve-2026-68350 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21910-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21910-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23477-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23477-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68350 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i &gt; ((cmd-&gt;hdr.len / 2) + 1)` which is off by two, allowing 2 extra iterations past valid _tx_status entries when the firmware- controlled hdr.ext exceeds hdr.len/2. Fix by using the correct comparison `i &gt;= (cmd-&gt;hdr.len / 2)`.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68350 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2730