https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:02:34 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-72241 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-72241 https://cve.radiocsirt.org/vuln/euvd-2026-353707 EUVD-2026-353707 https://cve.radiocsirt.org/vuln/euvd-2026-353707 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72241 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>leds: uleds: Fix potential buffer overread</p> <p>The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device.</p> <p>Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>leds: uleds: Fix potential buffer overread</p> <p>The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device.</p> <p>Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72241 https://cve.radiocsirt.org/vuln/ghsa-p332-q22m-rchg <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>leds: uleds: Fix potential buffer overread</p> <p>The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device.</p> <p>Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>leds: uleds: Fix potential buffer overread</p> <p>The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device.</p> <p>Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> https://cve.radiocsirt.org/vuln/ghsa-p332-q22m-rchg https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72241 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 239 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device. Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 239 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device. Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72241 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852 <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852