https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:45:17 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2026-AVI-0108 CERTFR-2026-AVI-0108 https://vulnerability.circl.lu/vuln/CERTFR-2026-AVI-0108 https://vulnerability.circl.lu/vuln/bdu:2026-13765 bdu:2026-13765 https://vulnerability.circl.lu/vuln/bdu:2026-13765 https://vulnerability.circl.lu/vuln/bell-cve-2023-54202 <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> https://vulnerability.circl.lu/vuln/bell-cve-2023-54202 https://vulnerability.circl.lu/vuln/fkie_cve-2023-54202 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: fix race condition UAF in i915_perf_add_config_ioctl</p> <p>Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object.</p> <p>[tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: fix race condition UAF in i915_perf_add_config_ioctl</p> <p>Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object.</p> <p>[tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2023-54202 https://vulnerability.circl.lu/vuln/ghsa-2x24-vjrm-p9g2 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: fix race condition UAF in i915_perf_add_config_ioctl</p> <p>Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object.</p> <p>[tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: fix race condition UAF in i915_perf_add_config_ioctl</p> <p>Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object.</p> <p>[tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> https://vulnerability.circl.lu/vuln/ghsa-2x24-vjrm-p9g2 https://vulnerability.circl.lu/vuln/rhsa-2023:6583 <p>security update for kernel</p> <p>security update for kernel</p> https://vulnerability.circl.lu/vuln/rhsa-2023:6583 https://vulnerability.circl.lu/vuln/suse-su-2026:0263-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://vulnerability.circl.lu/vuln/suse-su-2026:0263-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2023-54202 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 156 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object. [tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 156 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object. [tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2023-54202 https://vulnerability.circl.lu/vuln/wid-sec-w-2025-2941 <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu Denial‑of‑Service, Speicherbeschädigung oder weiteren nicht definierten Auswirkungen führen.</p> <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu Denial‑of‑Service, Speicherbeschädigung oder weiteren nicht definierten Auswirkungen führen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2025-2941