https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:12:29 +0000 https://vulnerability.circl.lu/vuln/cve-2023-4134 <p><strong>Affected:</strong> kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.</p> <p><strong>Affected:</strong> kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.</p> https://vulnerability.circl.lu/vuln/cve-2023-4134 https://vulnerability.circl.lu/vuln/usn-6464-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-aws-6.2, Ubuntu:22.04:LTS: linux-azure-6.2, Ubuntu:22.04:LTS: linux-azure-fde-6.2, Ubuntu:22.04:LTS: linux-gcp-6.2, Ubuntu:22.04:LTS: linux-hwe-6.2, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.2</p> <p>Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-31083)</p> <p>Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel contained a null pointer dereference vulnerability in some situations. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-3772)</p> <p>Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate SMB request protocol IDs, leading to a out-of- bounds read vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-38430)</p> <p>Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate command payload size, leading to a out-of-bounds read vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-38432)</p> <p>It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2023-3863)</p> <p>Laurence Wit discovered that the KSMBD implementation in the Linux kernel did not pr…</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-aws-6.2, Ubuntu:22.04:LTS: linux-azure-6.2, Ubuntu:22.04:LTS: linux-azure-fde-6.2, Ubuntu:22.04:LTS: linux-gcp-6.2, Ubuntu:22.04:LTS: linux-hwe-6.2, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.2</p> <p>Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-31083)</p> <p>Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel contained a null pointer dereference vulnerability in some situations. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-3772)</p> <p>Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate SMB request protocol IDs, leading to a out-of- bounds read vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-38430)</p> <p>Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate command payload size, leading to a out-of-bounds read vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-38432)</p> <p>It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2023-3863)</p> <p>Laurence Wit discovered that the KSMBD implementation in the Linux kernel did not pr…</p> https://vulnerability.circl.lu/vuln/usn-6464-1