https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:40:41 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-72227 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-72227 https://cve.radiocsirt.org/vuln/euvd-2026-353980 EUVD-2026-353980 https://cve.radiocsirt.org/vuln/euvd-2026-353980 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72227 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: mcast: avoid OOB read of num_dests header</p> <p>Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible.</p> <p>Instead of using offsetofend(), use the more common check for the whole header.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: mcast: avoid OOB read of num_dests header</p> <p>Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible.</p> <p>Instead of using offsetofend(), use the more common check for the whole header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72227 https://cve.radiocsirt.org/vuln/ghsa-h862-94w3-mqrr <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: mcast: avoid OOB read of num_dests header</p> <p>Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible.</p> <p>Instead of using offsetofend(), use the more common check for the whole header.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: mcast: avoid OOB read of num_dests header</p> <p>Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible.</p> <p>Instead of using offsetofend(), use the more common check for the whole header.</p> https://cve.radiocsirt.org/vuln/ghsa-h862-94w3-mqrr https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72227 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible. Instead of using offsetofend(), use the more common check for the whole header.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the access to struct batadv_tvlv_mcast_tracker&#39;s num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible. Instead of using offsetofend(), use the more common check for the whole header.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72227 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852 <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852