https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:12.439463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1759 ALSA-2022:1759 — Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update 2026-10-02T18:41:12.644681+00:00

Affected: AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)

Security Fix(es):

* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)

* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-202…

 https://cve.radiocsirt.org/vuln/euvd-2026-21018 EUVD-2026-21018 2026-10-02T18:41:12.645136+00:00 EUVD-2026-21018 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3716 fkie_cve-2021-3716 2026-10-02T18:41:12.645164+00:00

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-3vpg-mwgf-4jvj GHSA-3vpg-mwgf-4jvj 2026-10-02T18:41:12.645203+00:00

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-3716 gsd-2021-3716 2026-10-02T18:41:12.645233+00:00 gsd-2021-3716 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3716 msrc_CVE-2021-3716 — A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM… 2026-10-02T18:41:12.645251+00:00 msrc_CVE-2021-3716 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11078-1 openSUSE-SU-2024:11078-1 — nbdkit-1.27.8-1.2 on GA media 2026-10-02T18:41:12.645284+00:00

nbdkit-1.27.8-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:0397 RHSA-2022:0397 — Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update 2026-10-02T18:41:12.645310+00:00

nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS QEMU: block: fdc: null pointer dereference may lead to guest crash

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3716 UBUNTU-CVE-2021-3716 2026-10-02T18:41:12.645341+00:00

Affected: Ubuntu:16.04:LTS: nbdkit, Ubuntu:20.04:LTS: nbdkit, Ubuntu:22.04:LTS: nbdkit, Ubuntu:24.04:LTS: nbdkit, Ubuntu:25.10: nbdkit, Ubuntu:26.04:LTS: nbdkit

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.