https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:43:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89726 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()</p> <p>Patch series &#34;lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()&#34;, v2.</p> <p>This series fixes an off-by-one out-of-bounds read in ucs2_strnlen().</p> <p>The first patch is the real fix, the second patch comes as a bonus and fixes the code indentation.</p> <p>This patch (of 2):</p> <p>ucs2_strnlen() checks the current character before checking whether the caller-provided maximum length has been reached. If the input is not NUL-terminated within that bound, the loop can read one ucs2_char_t past the limit.</p> <p>Test the length before dereferencing to prevent an off-by-one out-of-bounds read.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()</p> <p>Patch series &#34;lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()&#34;, v2.</p> <p>This series fixes an off-by-one out-of-bounds read in ucs2_strnlen().</p> <p>The first patch is the real fix, the second patch comes as a bonus and fixes the code indentation.</p> <p>This patch (of 2):</p> <p>ucs2_strnlen() checks the current character before checking whether the caller-provided maximum length has been reached. If the input is not NUL-terminated within that bound, the loop can read one ucs2_char_t past the limit.</p> <p>Test the length before dereferencing to prevent an off-by-one out-of-bounds read.</p> https://vulnerability.circl.lu/vuln/cve-2026-89726