https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:17:33.406785+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3492 CVE-2021-3492 — Ubuntu linux kernel shiftfs file system double free vulnerability 2026-10-03T08:17:33.991893+00:00

Affected: Ubuntu Linux kernel

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

 https://vulnerability.circl.lu/vuln/lsn-0077-1 LSN-0077-1 — Kernel Live Patch Security Notice 2026-10-03T08:17:33.992023+00:00

Affected: Ubuntu:Pro:18.04:LTS: linux-gke-5.4, Ubuntu:Pro:18.04:LTS: linux-gkeop-5.4, Ubuntu:Pro:18.04:LTS: linux-hwe-5.4, Ubuntu:Pro:20.04:LTS: linux, Ubuntu:Pro:20.04:LTS: linux-gcp, Ubuntu:Pro:20.04:LTS: linux-gke, Ubuntu:Pro:20.04:LTS: linux-gkeop

Vincent Dehors discovered that the shiftfs file system in the Ubuntu Linux kernel did not properly handle faults in copy_from_user() when passing through ioctls to an underlying file system. A local attacker could use this to cause a denial of service (memory exhaustion) or execute arbitrary code.(CVE-2021-3492)