https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:29:05 +0000 https://cve.radiocsirt.org/vuln/cve-2023-47233 <p><strong>Affected:</strong> Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this &#34;could be exploited in a real world scenario.&#34; This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.</p> <p><strong>Affected:</strong> Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this &#34;could be exploited in a real world scenario.&#34; This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.</p> https://cve.radiocsirt.org/vuln/cve-2023-47233 https://cve.radiocsirt.org/vuln/usn-6774-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-aws-6.5, Ubuntu:22.04:LTS: linux-azure-6.5, Ubuntu:22.04:LTS: linux-gcp-6.5, Ubuntu:22.04:LTS: linux-hwe-6.5, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.5, Ubuntu:22.04:LTS: linux-nvidia-6.5, Ubuntu:22.04:LTS: linux-oem-6.5, Ubuntu:22.04:LTS: linux-oracle-6.5, Ubuntu:22.04:LTS: linux-starfive-6.5</p> <p>Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)</p> <p>Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware random number generator core; - Ext4 file system; - JFS file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - Logical Link layer; - Netlink; - Tomoyo security module; (CVE-2024-26704, CVE-2023-52615, CVE-2024-26805, CVE-2023-52604, CVE-2024-26614, CVE-2023-52602, CVE-2024-26635, CVE-2024-26622, CVE-2023-52601, CVE-2024-26801)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-aws-6.5, Ubuntu:22.04:LTS: linux-azure-6.5, Ubuntu:22.04:LTS: linux-gcp-6.5, Ubuntu:22.04:LTS: linux-hwe-6.5, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.5, Ubuntu:22.04:LTS: linux-nvidia-6.5, Ubuntu:22.04:LTS: linux-oem-6.5, Ubuntu:22.04:LTS: linux-oracle-6.5, Ubuntu:22.04:LTS: linux-starfive-6.5</p> <p>Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)</p> <p>Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware random number generator core; - Ext4 file system; - JFS file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - Logical Link layer; - Netlink; - Tomoyo security module; (CVE-2024-26704, CVE-2023-52615, CVE-2024-26805, CVE-2023-52604, CVE-2024-26614, CVE-2023-52602, CVE-2024-26635, CVE-2024-26622, CVE-2023-52601, CVE-2024-26801)</p> https://cve.radiocsirt.org/vuln/usn-6774-1