https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:15:45.745054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-43364 cnvd-2021-43364 2026-10-04T10:15:45.749492+00:00 cnvd-2021-43364 https://cve.radiocsirt.org/vuln/euvd-2026-48162 EUVD-2026-48162 2026-10-04T10:15:45.749525+00:00 EUVD-2026-48162 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36387 fkie_cve-2020-36387 2026-10-04T10:15:45.749539+00:00

An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

 https://cve.radiocsirt.org/vuln/ghsa-h865-4c46-jfqg GHSA-h865-4c46-jfqg 2026-10-04T10:15:45.749568+00:00

An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

 https://cve.radiocsirt.org/vuln/gsd-2020-36387 gsd-2020-36387 2026-10-04T10:15:45.749584+00:00 gsd-2020-36387 https://cve.radiocsirt.org/vuln/oesa-2021-1279 OESA-2021-1279 — kernel security update 2026-10-04T10:15:45.749595+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): there was a null pointer dereference in llcp_sock_getname in net/nfc/llcp_sock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service. #Root Cause After creating an nfc socket, bind the address by calling bind(), if LLCP_SAP_MAX was used as SAP, it cause the bind() failed and there would set llcp_sock->service_name as NULL. Although bind() returns an error here, it does not affect calling other socket functions. sock_getname() would invoke llcp_sock_getname(), llcp_sock_getname copied service name from llcp_sock->service_name by memcpy but llcp_sock->service_name is NULL. #Fix the patch for this issue: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=4ac06a1e013c(CVE-2021-3587) An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.(CVE-2020-36385) The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.(CVE-2020-28097) In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory location…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36387 UBUNTU-CVE-2020-36387 2026-10-04T10:15:45.749639+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-gke-4.15 and 8 more

An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.