https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:25:45.525025+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1988 ALSA-2022:1988 — Important: kernel security, bug fix, and enhancement update 2026-10-03T23:25:45.808711+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 10 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)

* kernel: avoid cyclic entity chains due to malformed USB descriptors (CVE-2020-0404)

* kernel: speculation on incompletely validated data on IBM Power9 (CVE-2020-4788)

* kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c (CVE-2020-13974)

* kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free (CVE-2021-0941)

* kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() (CVE-2021-3612)

* kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts (CVE-2021-3669)

* kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743)

* kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744)

* kernel: possible use-after-free in bluetooth module (CVE-2021-3752)

* kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks (CVE-2021-3759)

* kernel: DoS in ccp_run_aes_gcm_cmd() function (CVE-2021-3764)

* kernel: sctp: Invalid chunks may be used to remotely remove existing associations (CVE-2021-3772)

* kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients (CVE-2021-3773)

* kernel: possible leak or coruption of data residing on hugetlbfs (CVE-2021-4002)

* kernel: security regressi…

 https://cve.radiocsirt.org/vuln/bdu:2021-03994 bdu:2021-03994 2026-10-03T23:25:45.808844+00:00 bdu:2021-03994 https://cve.radiocsirt.org/vuln/certfr-2021-avi-553 certfr-2021-avi-553 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian et Debian LTS. Elles permettent à un atta… 2026-10-03T23:25:45.808863+00:00 certfr-2021-avi-553 https://cve.radiocsirt.org/vuln/cnvd-2021-60526 cnvd-2021-60526 2026-10-03T23:25:45.808881+00:00 cnvd-2021-60526 https://cve.radiocsirt.org/vuln/euvd-2026-22405 EUVD-2026-22405 2026-10-03T23:25:45.808893+00:00 EUVD-2026-22405 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21781 fkie_cve-2021-21781 2026-10-03T23:25:45.808904+00:00

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

 https://cve.radiocsirt.org/vuln/ghsa-v4c8-84p4-cxv7 GHSA-v4c8-84p4-cxv7 2026-10-03T23:25:45.808930+00:00

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

 https://cve.radiocsirt.org/vuln/gsd-2021-21781 gsd-2021-21781 2026-10-03T23:25:45.808948+00:00 gsd-2021-21781 https://cve.radiocsirt.org/vuln/oesa-2021-1324 OESA-2021-1324 — kernel security update 2026-10-03T23:25:45.808959+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.(CVE-2021-34556) In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.(CVE-2021-35477) An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11(CVE-2021-21781) In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size.(CVE-2021-38160)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1142-1 openSUSE-SU-2021:1142-1 — Security update for the Linux Kernel 2026-10-03T23:25:45.808992+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2021:2645-1 SUSE-SU-2021:2645-1 — Security update for the Linux Kernel 2026-10-03T23:25:45.809013+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21781 UBUNTU-CVE-2021-21781 2026-10-03T23:25:45.809032+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:16.04:LTS: linux and 66 more

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0112 WID-SEC-W-2022-0112 — Google Android: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-03T23:25:45.809144+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code zur Ausführung zu bringen und einen Denial-of-Service-Zustand auszulösen.