https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T23:35:31.012400+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-53684 CVE-2023-53684 — xfrm: Zero padding when dumping algos and encap 2026-09-29T23:35:31.016331+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

 https://vulnerability.circl.lu/vuln/ghsa-pmq6-ggff-fwmg GHSA-pmq6-ggff-fwmg 2026-09-29T23:35:31.016406+00:00

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.