https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:41:12 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-89794 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-89794 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1253 certfr-2026-avi-1253 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1253 https://cve.radiocsirt.org/vuln/euvd-2026-369167 EUVD-2026-369167 https://cve.radiocsirt.org/vuln/euvd-2026-369167 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89794 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: zero pipe read compound padding</p> <p>Compound response handling extends the last response iov to an eight-byte boundary.</p> <p>smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory.</p> <p>Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: zero pipe read compound padding</p> <p>Compound response handling extends the last response iov to an eight-byte boundary.</p> <p>smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory.</p> <p>Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-89794 https://cve.radiocsirt.org/vuln/ghsa-69w5-4c2f-pfhh <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: zero pipe read compound padding</p> <p>Compound response handling extends the last response iov to an eight-byte boundary.</p> <p>smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory.</p> <p>Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: zero pipe read compound padding</p> <p>Compound response handling extends the last response iov to an eight-byte boundary.</p> <p>smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory.</p> <p>Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> https://cve.radiocsirt.org/vuln/ghsa-69w5-4c2f-pfhh https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89794 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 189 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound response handling extends the last response iov to an eight-byte boundary. smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory. Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 189 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound response handling extends the last response iov to an eight-byte boundary. smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory. Allocate the aligned size and clear the unused tail before pinning the response buffer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89794 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3438 <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service zu verursachen oder eine nicht näher spezifizierte Auswirkung zu erzielen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service zu verursachen oder eine nicht näher spezifizierte Auswirkung zu erzielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3438