https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:06:38 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-80520 <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-80520 https://cve.radiocsirt.org/vuln/euvd-2026-359779 EUVD-2026-359779 https://cve.radiocsirt.org/vuln/euvd-2026-359779 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80520 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ovpn: fix NULL dereference when killing missing key</p> <p>ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present.</p> <p>Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ovpn: fix NULL dereference when killing missing key</p> <p>ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present.</p> <p>Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-80520 https://cve.radiocsirt.org/vuln/ghsa-v79r-cp4c-r8xr <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ovpn: fix NULL dereference when killing missing key</p> <p>ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present.</p> <p>Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ovpn: fix NULL dereference when killing missing key</p> <p>ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present.</p> <p>Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> https://cve.radiocsirt.org/vuln/ghsa-v79r-cp4c-r8xr https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80520 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 120 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 120 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80520 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3042 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3042