https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:55:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373062 EUVD-2026-373062 https://cve.radiocsirt.org/vuln/euvd-2026-373062 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6862 <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6862 https://cve.radiocsirt.org/vuln/ghsa-364h-vxjm-52rp <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> https://cve.radiocsirt.org/vuln/ghsa-364h-vxjm-52rp https://cve.radiocsirt.org/vuln/rhsa-2026:69321 <p>efivar: efivar: Denial of Service due to stack overflow in device path node parsing</p> <p>efivar: efivar: Denial of Service due to stack overflow in device path node parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2026:69321 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6862 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: efivar, Ubuntu:16.04:LTS: efivar, Ubuntu:18.04:LTS: efivar, Ubuntu:20.04:LTS: efivar, Ubuntu:22.04:LTS: efivar, Ubuntu:24.04:LTS: efivar, Ubuntu:25.10: efivar, Ubuntu:26.04:LTS: efivar</p> <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: efivar, Ubuntu:16.04:LTS: efivar, Ubuntu:18.04:LTS: efivar, Ubuntu:20.04:LTS: efivar, Ubuntu:22.04:LTS: efivar, Ubuntu:24.04:LTS: efivar, Ubuntu:25.10: efivar, Ubuntu:26.04:LTS: efivar</p> <p>A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node&#39;s Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6862