Security feed

25 October 2026

advisoryOfficial CVE List25 Oct 2026

CVE-2023-2269

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

Kernel CVE-2023-2269

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2023-2269

Kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-2269
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #16086 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:10:50 GMT
Publisher date: Tue, 25 Apr 2023 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2023-1838

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

Kernel CVE-2023-1838

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2023-1838

Kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-1838
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #16083 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:10:48 GMT
Publisher date: Wed, 05 Apr 2023 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2022-0500

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

kernel CVE-2022-0500

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2022-0500

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-0500
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #16035 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:09:24 GMT
Publisher date: Fri, 25 Mar 2022 18:03:03 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2022-0264

A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6

kernel CVE-2022-0264

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2022-0264

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-0264
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15875 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:07:07 GMT
Publisher date: Fri, 04 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2021-4135

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.

kernel CVE-2021-4135

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2021-4135

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-4135
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15872 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:07:05 GMT
Publisher date: Thu, 14 Jul 2022 19:30:19 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2021-4001

A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2.

kernel CVE-2021-4001

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2021-4001

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-4001
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15869 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:07:03 GMT
Publisher date: Fri, 21 Jan 2022 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2021-3655

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

kernel CVE-2021-3655

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2021-3655

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-3655
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15859 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:06:57 GMT
Publisher date: Thu, 05 Aug 2021 20:48:04 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2021-34866

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Kernel CVE-2021-34866

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2021-34866

Kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-34866
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #15852 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:06:53 GMT
Publisher date: Tue, 25 Jan 2022 15:30:36 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2021-20320

A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.

kernel CVE-2021-20320

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2021-20320

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-20320
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15838 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:06:45 GMT
Publisher date: Fri, 18 Feb 2022 17:50:43 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2020-25639

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

kernel CVE-2020-25639

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-25639

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-25639
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15813 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:06:27 GMT
Publisher date: Thu, 04 Mar 2021 21:56:28 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2020-14390

A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

kernel CVE-2020-14390

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-14390

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14390
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #15803 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:06:20 GMT
Publisher date: Fri, 18 Sep 2020 17:42:55 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2020-10781

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

kernel CVE-2020-10781

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-10781

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-10781
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #15791 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:05:28 GMT
Publisher date: Wed, 16 Sep 2020 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2020-35501

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem

kernel CVE-2020-35501

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-35501

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-35501
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #12163 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 00:02:53 GMT
Publisher date: Wed, 30 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2020-14304

A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.

kernel CVE-2020-14304

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-14304

kernel

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14304
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #12160 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 00:02:51 GMT
Publisher date: Tue, 15 Sep 2020 19:40:44 GMT

Read the original announcement