https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:30:03.200312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1578 ALSA-2021:1578 — Important: kernel security, bug fix, and enhancement update 2026-10-04T08:30:03.342305+00:00

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)

* kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811)

* kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (CVE-2019-19523)

* kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (CVE-2019-19528)

* kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431)

* kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114)

* kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464)

* kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314)

* kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356)

* kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c (CVE-2020-15437)

* kernel: umask not applied on filesystem without ACL support (CVE-2020-24394)

* kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)

* kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284)

* kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285)

* kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow…

 https://cve.radiocsirt.org/vuln/bdu:2022-02505 bdu:2022-02505 2026-10-04T08:30:03.342430+00:00 bdu:2022-02505 https://cve.radiocsirt.org/vuln/certfr-2021-avi-284 certfr-2021-avi-284 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-04T08:30:03.342449+00:00 certfr-2021-avi-284 https://cve.radiocsirt.org/vuln/cnvd-2021-33239 cnvd-2021-33239 2026-10-04T08:30:03.342466+00:00 cnvd-2021-33239 https://cve.radiocsirt.org/vuln/euvd-2026-48106 EUVD-2026-48106 2026-10-04T08:30:03.342479+00:00 EUVD-2026-48106 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36322 fkie_cve-2020-36322 2026-10-04T08:30:03.342490+00:00

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.

 https://cve.radiocsirt.org/vuln/ghsa-phvx-v9j2-6wfr GHSA-phvx-v9j2-6wfr 2026-10-04T08:30:03.342513+00:00

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.

 https://cve.radiocsirt.org/vuln/gsd-2020-36322 gsd-2020-36322 2026-10-04T08:30:03.342528+00:00 gsd-2020-36322 https://cve.radiocsirt.org/vuln/oesa-2021-1176 OESA-2021-1176 — kernel security update 2026-10-04T08:30:03.342539+00:00

Affected: openEuler:20.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es):

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.(CVE-2020-27170)

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.(CVE-2020-27171)

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.(CVE-2021-28660)

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.(CVE-2021-28964)

In dri…

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0579-1 openSUSE-SU-2021:0579-1 — Security update for the Linux Kernel 2026-10-04T08:30:03.342607+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2022:0065 RHSA-2022:0065 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-04T08:30:03.342633+00:00

kernel: perf_event_parse_addr_filter memory kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations kernel: Heap buffer overflow in firedtv driver

 https://cve.radiocsirt.org/vuln/suse-su-2021:1238-1 SUSE-SU-2021:1238-1 — Security update for the Linux Kernel 2026-10-04T08:30:03.342654+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36322 UBUNTU-CVE-2020-36322 2026-10-04T08:30:03.342689+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 67 more

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0515 WID-SEC-W-2022-0515 — IBM Spectrum Protect: Mehrere Schwachstellen 2026-10-04T08:30:03.342807+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.