https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:44:30.410343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:5238 ALSA-2021:5238 — Low: virt:rhel and virt-devel:rhel security update 2026-10-04T05:44:30.723169+00:00

Affected: AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-benchmarking, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel, AlmaLinux:8: libguestfs-inspect-icons and 93 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c (CVE-2021-3930)

* QEMU: net: e1000: infinite loop while processing transmit descriptors (CVE-2021-20257)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05772 bdu:2022-05772 2026-10-04T05:44:30.723589+00:00 bdu:2022-05772 https://cve.radiocsirt.org/vuln/certfr-2021-avi-485 certfr-2021-avi-485 — De multiples vulnérabilités ont été découvertes dans Citrix Hypervisor. Elles permettent à un attaquant de provoquer un… 2026-10-04T05:44:30.723616+00:00 certfr-2021-avi-485 https://cve.radiocsirt.org/vuln/cnvd-2021-41096 cnvd-2021-41096 2026-10-04T05:44:30.723641+00:00 cnvd-2021-41096 https://cve.radiocsirt.org/vuln/euvd-2026-21594 EUVD-2026-21594 2026-10-04T05:44:30.723660+00:00 EUVD-2026-21594 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20257 fkie_cve-2021-20257 2026-10-04T05:44:30.723679+00:00

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-j586-x8f6-9xf2 GHSA-j586-x8f6-9xf2 2026-10-04T05:44:30.723717+00:00

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-20257 gsd-2021-20257 2026-10-04T05:44:30.723746+00:00 gsd-2021-20257 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20257 msrc_CVE-2021-20257 — An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx… 2026-10-04T05:44:30.723764+00:00 msrc_CVE-2021-20257 https://cve.radiocsirt.org/vuln/oesa-2022-1690 OESA-2022-1690 — qemu security update 2026-10-04T05:44:30.723796+00:00

Affected: openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP3: qemu

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.(CVE-2020-13253) An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2021-20257)

 https://cve.radiocsirt.org/vuln/rhsa-2021:5238 RHSA-2021:5238 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update 2026-10-04T05:44:30.723844+00:00

QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c QEMU: net: e1000: infinite loop while processing transmit descriptors

 https://cve.radiocsirt.org/vuln/suse-su-2021:1023-1 SUSE-SU-2021:1023-1 — Security update for xen 2026-10-04T05:44:30.723876+00:00

Security update for xen

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20257 UBUNTU-CVE-2021-20257 2026-10-04T05:44:30.723903+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1097 WID-SEC-W-2022-1097 — QEMU: Mehrere Schwachstellen ermöglichten Denial of Service 2026-10-04T05:44:30.723947+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.