https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:10:54 +0000 https://cve.radiocsirt.org/vuln/cve-2024-23851 <p>copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel-&gt;data_size check. This is related to ctl_ioctl.</p> <p>copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel-&gt;data_size check. This is related to ctl_ioctl.</p> https://cve.radiocsirt.org/vuln/cve-2024-23851 https://cve.radiocsirt.org/vuln/usn-6724-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-azure-6.5, Ubuntu:22.04:LTS: linux-gcp-6.5, Ubuntu:22.04:LTS: linux-hwe-6.5, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.5, Ubuntu:22.04:LTS: linux-oem-6.5, Ubuntu:22.04:LTS: linux-oracle-6.5, Ubuntu:22.04:LTS: linux-starfive-6.5</p> <p>Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2023-46838)</p> <p>It was discovered that the Habana&#39;s AI Processors driver in the Linux kernel did not properly initialize certain data structures before passing them to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-50431)</p> <p>It was discovered that the device mapper driver in the Linux kernel did not properly validate target size during certain memory allocations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-52429, CVE-2024-23851)</p> <p>It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)</p> <p>Yang Chaoming discovered that the KSMBD implementation in the Linux kernel did not properly validate request buffer sizes, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2024-22705)</p> <p>Chenyuan Yang discovered that the btrfs file system in the…</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-azure-6.5, Ubuntu:22.04:LTS: linux-gcp-6.5, Ubuntu:22.04:LTS: linux-hwe-6.5, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.5, Ubuntu:22.04:LTS: linux-oem-6.5, Ubuntu:22.04:LTS: linux-oracle-6.5, Ubuntu:22.04:LTS: linux-starfive-6.5</p> <p>Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2023-46838)</p> <p>It was discovered that the Habana&#39;s AI Processors driver in the Linux kernel did not properly initialize certain data structures before passing them to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-50431)</p> <p>It was discovered that the device mapper driver in the Linux kernel did not properly validate target size during certain memory allocations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-52429, CVE-2024-23851)</p> <p>It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)</p> <p>Yang Chaoming discovered that the KSMBD implementation in the Linux kernel did not properly validate request buffer sizes, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2024-22705)</p> <p>Chenyuan Yang discovered that the btrfs file system in the…</p> https://cve.radiocsirt.org/vuln/usn-6724-1