https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 14:32:29 +0000 https://vulnerability.circl.lu/vuln/cve-2023-52746 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()</p> <p>int type = nla_type(nla);</p> <p>if (type &gt; XFRMA_MAX) { return -EOPNOTSUPP; }</p> <p>@type is then used as an array index and can be used as a Spectre v1 gadget.</p> <p>if (nla_len(nla) &lt; compat_policy[type].len) {</p> <p>array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()</p> <p>int type = nla_type(nla);</p> <p>if (type &gt; XFRMA_MAX) { return -EOPNOTSUPP; }</p> <p>@type is then used as an array index and can be used as a Spectre v1 gadget.</p> <p>if (nla_len(nla) &lt; compat_policy[type].len) {</p> <p>array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.</p> https://vulnerability.circl.lu/vuln/cve-2023-52746