<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T14:55:37.962329+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2021-03938</id>
    <title>bdu:2021-03938</title>
    <updated>2026-10-04T14:55:38.224750+00:00</updated>
    <content>bdu:2021-03938</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2021-03938"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2021-avi-550</id>
    <title>certfr-2021-avi-550 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de
SUSE. Certaines d'entre elles permettent à un at…</title>
    <updated>2026-10-04T14:55:38.224796+00:00</updated>
    <content>certfr-2021-avi-550</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2021-avi-550"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-29074</id>
    <title>EUVD-2026-29074</title>
    <updated>2026-10-04T14:55:38.224817+00:00</updated>
    <content>EUVD-2026-29074</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-29074"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2021-35039</id>
    <title>fkie_cve-2021-35039</title>
    <updated>2026-10-04T14:55:38.224829+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2021-35039"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-jf73-g393-6jw9</id>
    <title>GHSA-jf73-g393-6jw9</title>
    <updated>2026-10-04T14:55:38.224860+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-jf73-g393-6jw9"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2021-35039</id>
    <title>gsd-2021-35039</title>
    <updated>2026-10-04T14:55:38.224877+00:00</updated>
    <content>gsd-2021-35039</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2021-35039"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2021-35039</id>
    <title>msrc_CVE-2021-35039 — kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification aka CID-0c18f29aae7c. Without CONF…</title>
    <updated>2026-10-04T14:55:38.224888+00:00</updated>
    <content>msrc_CVE-2021-35039</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2021-35039"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2021-1279</id>
    <title>OESA-2021-1279 — kernel security update</title>
    <updated>2026-10-04T14:55:38.224906+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel</p>
<p>The Linux Kernel, the operating system core itself.

Security Fix(es):

there was a null pointer dereference in llcp_sock_getname in net/nfc/llcp_sock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service.  #Root Cause After creating an nfc socket, bind the address by calling bind(), if LLCP_SAP_MAX was used as SAP, it cause the bind() failed and there would set llcp_sock-&amp;gt;service_name  as NULL.  Although bind() returns an error here, it does not affect calling other socket functions. sock_getname() would invoke llcp_sock_getname(), llcp_sock_getname copied service  name from llcp_sock-&amp;gt;service_name by memcpy but llcp_sock-&amp;gt;service_name is NULL.  #Fix the patch for this issue: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=4ac06a1e013c(CVE-2021-3587)

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.(CVE-2020-36385)

The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.(CVE-2020-28097)

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory location…</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2021-1279"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2021:1076-1</id>
    <title>openSUSE-SU-2021:1076-1 — Security update for the Linux Kernel</title>
    <updated>2026-10-04T14:55:38.224951+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for the Linux Kernel</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2021:1076-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2021:2408-1</id>
    <title>SUSE-SU-2021:2408-1 — Security update for the Linux Kernel</title>
    <updated>2026-10-04T14:55:38.224972+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for the Linux Kernel</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2021:2408-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-35039</id>
    <title>UBUNTU-CVE-2021-35039</title>
    <updated>2026-10-04T14:55:38.224989+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:FIPS-updates:18.04:LTS: linux-aws-fips, Ubuntu:Pro:FIPS-updates:18.04:LTS: linux-azure-fips, Ubuntu:Pro:FIPS-updates:18.04:LTS: linux-fips, Ubuntu:Pro:FIPS-updates:18.04:LTS: linux-gcp-fips, Ubuntu:Pro:FIPS:18.04:LTS: linux-aws-fips, Ubuntu:Pro:FIPS:18.04:LTS: linux-azure-fips, Ubuntu:Pro:FIPS:18.04:LTS: linux-fips, Ubuntu:Pro:FIPS:18.04:LTS: linux-gcp-fips, Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-azure-5.11 and 13 more</p>
<p>kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-35039"/>
  </entry>
</feed>
