https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:48:17 +0000 https://db.gcve.eu/vuln/cve-2026-53218 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_exthdr: fix register tracking for F_PRESENT flag</p> <p>nft_exthdr_init() passes user-controlled priv-&gt;len to nft_parse_register_store(), which marks that many bytes in the register bitmap as initialized. However, when NFT_EXTHDR_F_PRESENT is set, the eval paths write only 1 byte (nft_reg_store8) or 4 bytes (*dest = 0 on TCP/DCCP error path). When len &gt; 4, registers beyond the first are never written, retaining uninitialized stack data from nft_regs.</p> <p>Bail out if userspace requests too much data when F_PRESENT is set.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_exthdr: fix register tracking for F_PRESENT flag</p> <p>nft_exthdr_init() passes user-controlled priv-&gt;len to nft_parse_register_store(), which marks that many bytes in the register bitmap as initialized. However, when NFT_EXTHDR_F_PRESENT is set, the eval paths write only 1 byte (nft_reg_store8) or 4 bytes (*dest = 0 on TCP/DCCP error path). When len &gt; 4, registers beyond the first are never written, retaining uninitialized stack data from nft_regs.</p> <p>Bail out if userspace requests too much data when F_PRESENT is set.</p> https://db.gcve.eu/vuln/cve-2026-53218