https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:14:48.409882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-026 certfr-2017-avi-026 — De multiples vulnérabilités ont été corrigées dans <span class="textit">le noyau Linux de Suse</span>. Certaines d'entr… 2026-10-03T10:14:48.680225+00:00 certfr-2017-avi-026 https://cve.radiocsirt.org/vuln/cnvd-2017-00070 cnvd-2017-00070 2026-10-03T10:14:48.680308+00:00 cnvd-2017-00070 https://cve.radiocsirt.org/vuln/euvd-2026-88243 EUVD-2026-88243 2026-10-03T10:14:48.680337+00:00 EUVD-2026-88243 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10088 fkie_cve-2016-10088 2026-10-03T10:14:48.680359+00:00

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

 https://cve.radiocsirt.org/vuln/ghsa-m9p4-r7pw-hpw3 GHSA-m9p4-r7pw-hpw3 2026-10-03T10:14:48.680406+00:00

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

 https://cve.radiocsirt.org/vuln/gsd-2016-10088 gsd-2016-10088 2026-10-03T10:14:48.680441+00:00 gsd-2016-10088 https://cve.radiocsirt.org/vuln/rhsa-2017:0817 RHSA-2017:0817 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T10:14:48.680463+00:00

kernel: race condition in the TLB flush logic kernel: double-free in usb-audio triggered by invalid USB descriptor kernel: scsi: aacraid: double fetch in ioctl_send_fib() kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit kernel: net: Out of bounds stack read in memcpy_fromiovec kernel: Use after free in SCSI generic device interface kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression) kernel - IPV6 fragmentation flaw kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)

 https://cve.radiocsirt.org/vuln/rhsa-2017:1842 RHSA-2017:1842 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T10:14:48.680524+00:00

Kernel: fs: VFS denial of service Kernel: fs: umount denial of service kernel: ext4 filesystem page fault race condition with fallocate call. kernel: crypto: GPF in lrw_crypt caused by null-deref kernel: Overflowing kernel mount table using shared bind mount kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c kernel: Use after free in SCSI generic device interface Kernel: kvm: nVMX: uncaught software exceptions in L1 guest leads to DoS kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user kernel: Memory leaks in xfs_attr_list.c error paths kernel: netlink: double-free in netlink_dump kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression) kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c Kernel: kvm: use after free in complete_emulated_mmio Kernel: kvm: page reference leakage in handle_vmon kernel: Null pointer dereference in search_keyring kernel: ping socket / AF_LLC connect() sin_family race kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix) kernel: ipv4: Invalid IP options could cause skb->dst drop kernel…

 https://cve.radiocsirt.org/vuln/suse-su-2017:0227-1 SUSE-SU-2017:0227-1 — Security update for Linux Kernel Live Patch 0 for SLE 12 SP2 2026-10-03T10:14:48.680673+00:00

Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10088 UBUNTU-CVE-2016-10088 2026-10-03T10:14:48.680715+00:00

Affected: Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-edge and 17 more

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.