https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:08:56 +0000 https://cve.radiocsirt.org/vuln/cve-2024-49936 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/xen-netback: prevent UAF in xenvif_flush_hash()</p> <p>During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head-&gt;next after the entry becomes free.</p> <p>Therefore, to solve this, you need to change it to list_for_each_entry_safe.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/xen-netback: prevent UAF in xenvif_flush_hash()</p> <p>During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head-&gt;next after the entry becomes free.</p> <p>Therefore, to solve this, you need to change it to list_for_each_entry_safe.</p> https://cve.radiocsirt.org/vuln/cve-2024-49936