https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:26:56.339005+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1093 ALSA-2021:1093 — Important: kernel security, bug fix, and enhancement update 2026-10-03T18:26:56.411530+00:00

Affected: AlmaLinux:8: kernel-abi-whitelists, AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)

* kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374)

* kernel: Use after free via PI futex state (CVE-2021-3347)

* kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708)

* kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)

* kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)

* Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152)

* kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* race condition when creating child sockets from syncookies (BZ#1915529)

* On System Z, a hash needs state randomized for entropy extraction (BZ#1915816)

* scsi: target: core_tmr_abort_task() reporting multiple aborts for the same se_cmd->tag (BZ#1918354)

* [mlx5] VF interface stats are not reflected in "ip -s link show" / "ifconfig <vf>" commands (BZ#1921060)

* Win10 guest automatic reboot after migration in Win10 and WSL2 on Intel hosts (BZ#1923281)

* [AlmaLinux 8.3] Repeated messages - Unable to burst-read optrom segment (BZ#1924222)

* Backport…

 https://cve.radiocsirt.org/vuln/bdu:2021-01126 bdu:2021-01126 2026-10-03T18:26:56.411626+00:00 bdu:2021-01126 https://cve.radiocsirt.org/vuln/bell-cve-2021-26708 Withdrawn: BELL-CVE-2021-26708 — CVE-2021-26708 does not affect BellSoft software 2026-10-03T18:26:56.411645+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2021-avi-109 certfr-2021-avi-109 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-03T18:26:56.411661+00:00 certfr-2021-avi-109 https://cve.radiocsirt.org/vuln/cnvd-2021-10822 cnvd-2021-10822 2026-10-03T18:26:56.411675+00:00 cnvd-2021-10822 https://cve.radiocsirt.org/vuln/euvd-2026-25197 EUVD-2026-25197 2026-10-03T18:26:56.411686+00:00 EUVD-2026-25197 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26708 fkie_cve-2021-26708 2026-10-03T18:26:56.411696+00:00

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

 https://cve.radiocsirt.org/vuln/ghsa-hhxw-8c9w-q5q9 GHSA-hhxw-8c9w-q5q9 2026-10-03T18:26:56.411718+00:00

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

 https://cve.radiocsirt.org/vuln/gsd-2021-26708 gsd-2021-26708 2026-10-03T18:26:56.411733+00:00 gsd-2021-26708 https://cve.radiocsirt.org/vuln/msrc_cve-2021-26708 msrc_CVE-2021-26708 — A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOC… 2026-10-03T18:26:56.411743+00:00 msrc_CVE-2021-26708 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10728-1 openSUSE-SU-2024:10728-1 — kernel-devel-5.14.6-1.4 on GA media 2026-10-03T18:26:56.411761+00:00

kernel-devel-5.14.6-1.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:1081 RHSA-2021:1081 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-03T18:26:56.411840+00:00

kernel: use after free in eventpoll.c may lead to escalation of privilege Kernel: KVM: host stack overflow due to lazy update IOAPIC kernel: SCSI target (LIO) write to any block on ILO backstore kernel: Use after free via PI futex state kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c kernel: iscsi: unrestricted access to sessions and handles kernel: out-of-bounds read in libiscsi module kernel: heap buffer overflow in the iSCSI subsystem

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26708 UBUNTU-CVE-2021-26708 2026-10-03T18:26:56.411866+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-hwe and 10 more

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.