https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T01:28:21.044082+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-52746 CVE-2023-52746 — xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() 2026-09-30T01:28:21.046069+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()

int type = nla_type(nla);

if (type > XFRMA_MAX) { return -EOPNOTSUPP; }

@type is then used as an array index and can be used as a Spectre v1 gadget.

if (nla_len(nla) < compat_policy[type].len) {

array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.