https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T14:49:04.918309+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-99219 fkie_cve-2026-99219 2026-11-12T14:49:04.926808+00:00

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Initialize modname and offset in print_rec()

print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf().

Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480

This can be triggered by reading available_filter_functions while a module is being loaded or unloaded.

Initialize both variables so a failed lookup skips the module name.

 https://db.gcve.eu/vuln/ghsa-9w62-w855-8959 GHSA-9w62-w855-8959 2026-11-12T14:49:04.926885+00:00

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Initialize modname and offset in print_rec()

print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf().

Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480

This can be triggered by reading available_filter_functions while a module is being loaded or unloaded.

Initialize both variables so a failed lookup skips the module name.

 https://db.gcve.eu/vuln/msrc_cve-2026-99219 msrc_CVE-2026-99219 — ftrace: Initialize modname and offset in print_rec() 2026-11-12T14:49:04.926915+00:00 msrc_CVE-2026-99219 https://db.gcve.eu/vuln/opensuse-su-2026:12497-1 openSUSE-SU-2026:12497-1 — kernel-devel-7.3.3-1.1 on GA media 2026-11-12T14:49:04.926937+00:00

kernel-devel-7.3.3-1.1 on GA media

 https://db.gcve.eu/vuln/ubuntu-cve-2026-99219 UBUNTU-CVE-2026-99219 2026-11-12T14:49:04.926971+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 165 more

In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf(). Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480 This can be triggered by reading available_filter_functions while a module is being loaded or unloaded. Initialize both variables so a failed lookup skips the module name.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4302 WID-SEC-W-2026-4302 — Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-11-12T14:49:04.927216+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Auslösung eines Denial-of-Service-Angriffs, die Manipulation oder Offenlegung von Daten, die Ausführung von beliebigem Code, die Erlangung erweiterter Berechtigungen oder die Umgehung von Sicherheitsmaßnahmen.