https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:05:28.049711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04832 bdu:2021-04832 2026-10-04T17:05:28.273609+00:00 bdu:2021-04832 https://cve.radiocsirt.org/vuln/certfr-2021-avi-227 certfr-2021-avi-227 — De multiples vulnérabilités ont été découvertes dans Citrix Hypervisor. Elles permettent à un attaquant de provoquer un… 2026-10-04T17:05:28.273675+00:00 certfr-2021-avi-227 https://cve.radiocsirt.org/vuln/cnvd-2021-37766 cnvd-2021-37766 2026-10-04T17:05:28.273695+00:00 cnvd-2021-37766 https://cve.radiocsirt.org/vuln/euvd-2026-26052 EUVD-2026-26052 2026-10-04T17:05:28.273708+00:00 EUVD-2026-26052 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28688 fkie_cve-2021-28688 2026-10-04T17:05:28.273719+00:00

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11.

 https://cve.radiocsirt.org/vuln/ghsa-hqhv-rx9w-cr56 GHSA-hqhv-rx9w-cr56 2026-10-04T17:05:28.273752+00:00

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11.

 https://cve.radiocsirt.org/vuln/gsd-2021-28688 gsd-2021-28688 2026-10-04T17:05:28.273771+00:00 gsd-2021-28688 https://cve.radiocsirt.org/vuln/oesa-2021-1176 OESA-2021-1176 — kernel security update 2026-10-04T17:05:28.273782+00:00

Affected: openEuler:20.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es):

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.(CVE-2020-27170)

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.(CVE-2020-27171)

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.(CVE-2021-28660)

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.(CVE-2021-28964)

In dri…

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0532-1 openSUSE-SU-2021:0532-1 — Security update for the Linux Kernel 2026-10-04T17:05:28.273855+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2021:1175-1 SUSE-SU-2021:1175-1 — Security update for the Linux Kernel 2026-10-04T17:05:28.273884+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-28688 UBUNTU-CVE-2021-28688 2026-10-04T17:05:28.273913+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 69 more

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11.