Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:54:48 +0000 bdu:2026-11473 https://vulnerability.circl.lu/vuln/bdu:2026-11473 bdu:2026-11473 https://vulnerability.circl.lu/vuln/bdu:2026-11473 fkie_cve-2026-49430 https://vulnerability.circl.lu/vuln/fkie_cve-2026-49430 <p>The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation.</p> <p>A local user with the &#34;receive&#34; delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.</p> <p>The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation.</p> <p>A local user with the &#34;receive&#34; delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-49430 GHSA-gx22-rr34-hq5j https://vulnerability.circl.lu/vuln/ghsa-gx22-rr34-hq5j <p>The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation.</p> <p>A local user with the &#34;receive&#34; delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.</p> <p>The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation.</p> <p>A local user with the &#34;receive&#34; delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.</p> https://vulnerability.circl.lu/vuln/ghsa-gx22-rr34-hq5j