https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:12:20.412221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:3548 ALSA-2021:3548 — Moderate: kernel security, bug fix, and enhancement update 2026-10-03T06:12:21.131383+00:00

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: SVM nested virtualization issue in KVM (AVIC support) (CVE-2021-3653)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8.4 Nightly[0308] - HST:STC950:Fleetwood: LPAR crashed during LPM: BUG at lib/locks.c:34! (using ibmvfc) (BZ#1969792)

* AlmaLinux8.2 - s390/vtime: fix increased steal time accounting (BZ#1988386)

* [FJ8.4 Bug]: Installation of AlmaLinux8.4 hang up on a Tatlow platform while loading intel_lpss_pci module. (BZ#1989560)

* kernel panic in drm_fb_helper_dirty_work() caused by a race condition qxl driver (BZ#1992839)

* [AlmaLinux8.4] TIOCGSERIAL ioctl fails on serial device (BZ#1993872)

* AlmaLinux8.4 Nightly[0208] - kernel panic when executing test case for persistent device configuration (using DASD) (BZ#1995206)

* Killing ceph daemon leaving an unhealthy ocs/ocp cluster (worker node/s NotReady) (BZ#1995862)

* ceph: potential data corruption in cephfs write_begin codepath (BZ#1996680)

* libceph: allow addrvecs with a single NONE/blank address (BZ#1996682)

* [iavf] traffic stops after host sets vf trust on (BZ#1997536)

* [ice][iavf] hit some call trace and system panic when create-remove-vfs in loop (BZ#1997538)

* Missing backport of IMA boot aggregate calculation in almali…

 https://cve.radiocsirt.org/vuln/bdu:2022-00682 bdu:2022-00682 2026-10-03T06:12:21.131548+00:00 bdu:2022-00682 https://cve.radiocsirt.org/vuln/certfr-2021-avi-695 certfr-2021-avi-695 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-03T06:12:21.131578+00:00 certfr-2021-avi-695 https://cve.radiocsirt.org/vuln/euvd-2026-21035 EUVD-2026-21035 2026-10-03T06:12:21.131605+00:00 EUVD-2026-21035 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3653 fkie_cve-2021-3653 2026-10-03T06:12:21.131632+00:00

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.

 https://cve.radiocsirt.org/vuln/ghsa-g58x-c6rr-7fp2 GHSA-g58x-c6rr-7fp2 2026-10-03T06:12:21.131682+00:00

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.

 https://cve.radiocsirt.org/vuln/gsd-2021-3653 gsd-2021-3653 2026-10-03T06:12:21.131720+00:00 gsd-2021-3653 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3653 msrc_CVE-2021-3653 — A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM… 2026-10-03T06:12:21.131743+00:00 msrc_CVE-2021-3653 https://cve.radiocsirt.org/vuln/oesa-2021-1366 OESA-2021-1366 — kernel security update 2026-10-03T06:12:21.131791+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.(CVE-2021-40490) A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.(CVE-2021-3653) An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.(CVE-2021-22543)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1271-1 openSUSE-SU-2021:1271-1 — Security update for the Linux Kernel 2026-10-03T06:12:21.131845+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2021:3547 RHSA-2021:3547 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-03T06:12:21.131885+00:00

kernel: SVM nested virtualization issue in KVM (AVIC support)

 https://cve.radiocsirt.org/vuln/suse-su-2021:14849-1 SUSE-SU-2021:14849-1 — Security update for the Linux Kernel 2026-10-03T06:12:21.131914+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3653 UBUNTU-CVE-2021-3653 2026-10-03T06:12:21.131962+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 75 more

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2065 WID-SEC-W-2022-2065 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T06:12:21.132185+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.