https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:05:11 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-74466 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-74466 https://cve.radiocsirt.org/vuln/euvd-2026-353871 EUVD-2026-353871 https://cve.radiocsirt.org/vuln/euvd-2026-353871 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74466 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>s390/zcrypt: Close speculative mem read possibility</p> <p>The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier.</p> <p>Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>s390/zcrypt: Close speculative mem read possibility</p> <p>The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier.</p> <p>Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-74466 https://cve.radiocsirt.org/vuln/ghsa-4w55-4rvm-3v48 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>s390/zcrypt: Close speculative mem read possibility</p> <p>The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier.</p> <p>Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>s390/zcrypt: Close speculative mem read possibility</p> <p>The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier.</p> <p>Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> https://cve.radiocsirt.org/vuln/ghsa-4w55-4rvm-3v48 https://cve.radiocsirt.org/vuln/msrc_cve-2026-74466 msrc_CVE-2026-74466 https://cve.radiocsirt.org/vuln/msrc_cve-2026-74466 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-74466 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier. Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier. Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-74466 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852 <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2852