https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:00:36.335488+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:5227 ALSA-2021:5227 — Moderate: kernel security and bug fix update 2026-10-04T17:00:36.719755+00:00

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename() (CVE-2021-20321)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* panic while breaking a lease/delegation after user mode helper invocation (BZ#2010333)

* The ASR driver is causing a system crash in AlmaLinux8.4 compared to AlmaLinux8.3 due to kernel changes (BZ#2016384)

* AlmaLinux8: DFS provided SMB shares are not accessible following unprivileged access (BZ#2017177)

* Avoid hitting the rtnl_trylock/restart_syscall logic in net-sysfs when possible (BZ#2021165)

* AlmaLinux8: x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (BZ#2024678)

* AlmaLinux8.4-[Regression][P10][DD2.0][Rainier/Denali] - system crashed while offlining and onlining cores (BZ#2026450)

 https://cve.radiocsirt.org/vuln/bdu:2022-05684 bdu:2022-05684 2026-10-04T17:00:36.719838+00:00 bdu:2022-05684 https://cve.radiocsirt.org/vuln/bell-cve-2021-20321 Withdrawn: BELL-CVE-2021-20321 — CVE-2021-20321 does not affect BellSoft software 2026-10-04T17:00:36.719856+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2021-avi-969 certfr-2021-avi-969 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provo… 2026-10-04T17:00:36.719871+00:00 certfr-2021-avi-969 https://cve.radiocsirt.org/vuln/cnvd-2022-21490 cnvd-2022-21490 2026-10-04T17:00:36.719886+00:00 cnvd-2022-21490 https://cve.radiocsirt.org/vuln/euvd-2026-21635 EUVD-2026-21635 2026-10-04T17:00:36.719898+00:00 EUVD-2026-21635 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20321 fkie_cve-2021-20321 2026-10-04T17:00:36.719909+00:00

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

 https://cve.radiocsirt.org/vuln/gsd-2021-20321 gsd-2021-20321 2026-10-04T17:00:36.719929+00:00 gsd-2021-20321 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20321 msrc_CVE-2021-20321 — A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in… 2026-10-04T17:00:36.719940+00:00 msrc_CVE-2021-20321 https://cve.radiocsirt.org/vuln/oesa-2021-1475 OESA-2021-1475 — kernel security update 2026-10-04T17:00:36.719957+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.(CVE-2021-4002) In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel(CVE-2021-0920) A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.(CVE-2021-4037) A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to…

 https://cve.radiocsirt.org/vuln/rhsa-2021:5227 RHSA-2021:5227 — Red Hat Security Advisory: kernel security and bug fix update 2026-10-04T17:00:36.719998+00:00

kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()

 https://cve.radiocsirt.org/vuln/rhsa-2021:5241 RHSA-2021:5241 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-04T17:00:36.720015+00:00

kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()

 https://cve.radiocsirt.org/vuln/suse-su-2022:1651-1 SUSE-SU-2022:1651-1 — Security update for the Linux Kernel 2026-10-04T17:00:36.720031+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20321 UBUNTU-CVE-2021-20321 2026-10-04T17:00:36.720051+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 84 more

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0137 WID-SEC-W-2022-0137 — Android Patchday Juni 2022 2026-10-04T17:00:36.720190+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.