https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:58:06.041558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02567 bdu:2020-02567 2026-10-04T12:58:06.170058+00:00 bdu:2020-02567 https://cve.radiocsirt.org/vuln/bell-cve-2019-11191 Withdrawn: BELL-CVE-2019-11191 — CVE-2019-11191 does not affect BellSoft software 2026-10-04T12:58:06.170100+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-avi-244 certfr-2019-avi-244 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoq… 2026-10-04T12:58:06.170120+00:00 certfr-2019-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-54257 EUVD-2026-54257 2026-10-04T12:58:06.170137+00:00 EUVD-2026-54257 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11191 fkie_cve-2019-11191 2026-10-04T12:58:06.170148+00:00

The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported

 https://cve.radiocsirt.org/vuln/ghsa-wv63-pcg9-3x4q GHSA-wv63-pcg9-3x4q 2026-10-04T12:58:06.170178+00:00

** DISPUTED ** The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported.

 https://cve.radiocsirt.org/vuln/gsd-2019-11191 gsd-2019-11191 2026-10-04T12:58:06.170196+00:00 gsd-2019-11191 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11191 UBUNTU-CVE-2019-11191 2026-10-04T12:58:06.170207+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 25 more

The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported