<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-01T05:22:28.602073+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2023-52913</id>
    <title>CVE-2023-52913 — drm/i915: Fix potential context UAFs</title>
    <updated>2026-10-01T05:22:28.626243+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Linux</p>
<p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>drm/i915: Fix potential context UAFs</p>
<p>gem_context_register() makes the context visible to userspace, and which
point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl.
So we need to ensure that nothing uses the ctx ptr after this.  And we
need to ensure that adding the ctx to the xarray is the *last* thing
that gem_context_register() does with the ctx pointer.</p>
<p>[tursulin: Stable and fixes tags add/tidy.]
(cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2023-52913"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/usn-7288-1</id>
    <title>USN-7288-1 — linux, linux-lowlatency vulnerabilities</title>
    <updated>2026-10-01T05:22:28.626346+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux, Ubuntu:22.04:LTS: linux-lowlatency</p>
<p>Attila Szász discovered that the HFS+ file system implementation in the
Linux Kernel contained a heap overflow vulnerability. An attacker could use
a specially crafted file system image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2025-0927)</p>
<p>Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
  - ARM64 architecture;
  - x86 architecture;
  - Block layer subsystem;
  - ACPI drivers;
  - GPU drivers;
  - HID subsystem;
  - I2C subsystem;
  - IIO ADC drivers;
  - IIO subsystem;
  - InfiniBand drivers;
  - IOMMU subsystem;
  - IRQ chip drivers;
  - Multiple devices driver;
  - Media drivers;
  - Network drivers;
  - STMicroelectronics network drivers;
  - Parport drivers;
  - Pin controllers subsystem;
  - Direct Digital Synthesis drivers;
  - TCM subsystem;
  - TTY drivers;
  - USB Dual Role (OTG-ready) Controller drivers;
  - USB Serial drivers;
  - USB Type-C support driver;
  - USB Type-C Connector System Software Interface driver;
  - BTRFS file system;
  - File systems infrastructure;
  - Network file system (NFS) client;
  - NILFS2 file system;
  - NTFS3 file system;
  - SMB network file system;
  - User-space API (UAPI);
  - io_uring subsystem;
  - BPF subsystem;
  - Timer substystem drivers;
  - Tracing infrastructure;
  - Closures library;
  - Memory management;
  - Amateur Radio…</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/usn-7288-1"/>
  </entry>
</feed>
