https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:22:30.772709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:3057 ALSA-2021:3057 — Important: kernel security, bug fix, and enhancement update 2026-10-03T05:22:31.342986+00:00

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: race condition in net/can/bcm.c leads to local privilege escalation (CVE-2021-3609)

* kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543)

* kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Urgent: Missing dptf_power.ko module in AlmaLinux8 (BZ#1968381)

* [mlx5] kdump over NFS fails: mlx5 driver gives error "Stop room 95 is bigger than the SQ size 64" (BZ#1969909)

* BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 in bluetooth hci_error_reset on intel-tigerlake-h01 (BZ#1972564)

* Update CIFS to kernel 5.10 (BZ#1973637)

* Backport "tick/nohz: Conditionally restart tick on idle exit" to AlmaLinux 8.5 (BZ#1978710)

* Significant performance drop starting on kernel-4.18.0-277 visible on mmap benchmark (BZ#1980314)

* Inaccessible NFS server overloads clients (native_queued_spin_lock_slowpath connotation?) (BZ#1980613)

* [AlmaLinux8.4 BUG],RialtoMLK, I915 graphic driver failed to boot with one new 120HZ panel (BZ#1981250)

* act_ct: subject to DNAT tuple collision (BZ#1982494)

Enhancement(s):

* [Lenovo 8.5 FEAT] drivers/nvme - Updat…

 https://cve.radiocsirt.org/vuln/bdu:2021-03233 bdu:2021-03233 2026-10-03T05:22:31.343096+00:00 bdu:2021-03233 https://cve.radiocsirt.org/vuln/certfr-2021-avi-483 certfr-2021-avi-483 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-03T05:22:31.343118+00:00 certfr-2021-avi-483 https://cve.radiocsirt.org/vuln/cnvd-2021-60529 cnvd-2021-60529 2026-10-03T05:22:31.343134+00:00 cnvd-2021-60529 https://cve.radiocsirt.org/vuln/euvd-2026-20935 EUVD-2026-20935 2026-10-03T05:22:31.343146+00:00 EUVD-2026-20935 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3609 fkie_cve-2021-3609 2026-10-03T05:22:31.343157+00:00

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

 https://cve.radiocsirt.org/vuln/ghsa-rv9w-mxpp-hwhj GHSA-rv9w-mxpp-hwhj 2026-10-03T05:22:31.343179+00:00

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

 https://cve.radiocsirt.org/vuln/gsd-2021-3609 gsd-2021-3609 2026-10-03T05:22:31.343195+00:00 gsd-2021-3609 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3609 msrc_CVE-2021-3609 — .A flaw was found in the CAN BCM networking protocol in the Linux kernel where a local attacker can abuse a flaw in the… 2026-10-03T05:22:31.343205+00:00 msrc_CVE-2021-3609 https://cve.radiocsirt.org/vuln/oesa-2021-1279 OESA-2021-1279 — kernel security update 2026-10-03T05:22:31.343238+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): there was a null pointer dereference in llcp_sock_getname in net/nfc/llcp_sock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service. #Root Cause After creating an nfc socket, bind the address by calling bind(), if LLCP_SAP_MAX was used as SAP, it cause the bind() failed and there would set llcp_sock->service_name as NULL. Although bind() returns an error here, it does not affect calling other socket functions. sock_getname() would invoke llcp_sock_getname(), llcp_sock_getname copied service name from llcp_sock->service_name by memcpy but llcp_sock->service_name is NULL. #Fix the patch for this issue: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=4ac06a1e013c(CVE-2021-3587) An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.(CVE-2020-36385) The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.(CVE-2020-28097) In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory location…

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1076-1 openSUSE-SU-2021:1076-1 — Security update for the Linux Kernel 2026-10-03T05:22:31.343282+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2021:3044 RHSA-2021:3044 — Red Hat Security Advisory: kpatch-patch security update 2026-10-03T05:22:31.343303+00:00

kernel: race condition in net/can/bcm.c leads to local privilege escalation kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c

 https://cve.radiocsirt.org/vuln/suse-su-2021:14849-1 SUSE-SU-2021:14849-1 — Security update for the Linux Kernel 2026-10-03T05:22:31.343324+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3609 UBUNTU-CVE-2021-3609 2026-10-03T05:22:31.343346+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 80 more

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0887 WID-SEC-W-2022-0887 — Android Patchday August 2022 2026-10-03T05:22:31.343474+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuführen.