https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:53:41.096966+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1759 ALSA-2022:1759 — Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update 2026-10-02T19:53:41.311188+00:00

Affected: AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)

Security Fix(es):

* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)

* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-202…

 https://cve.radiocsirt.org/vuln/bdu:2022-00753 bdu:2022-00753 2026-10-02T19:53:41.311464+00:00 bdu:2022-00753 https://cve.radiocsirt.org/vuln/euvd-2026-21065 EUVD-2026-21065 2026-10-02T19:53:41.311514+00:00 EUVD-2026-21065 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3748 fkie_cve-2021-3748 2026-10-02T19:53:41.311528+00:00

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.

 https://cve.radiocsirt.org/vuln/ghsa-4f87-mww8-gm8x GHSA-4f87-mww8-gm8x 2026-10-02T19:53:41.311586+00:00

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.

 https://cve.radiocsirt.org/vuln/gsd-2021-3748 gsd-2021-3748 2026-10-02T19:53:41.311604+00:00 gsd-2021-3748 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3748 msrc_CVE-2021-3748 — A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address… 2026-10-02T19:53:41.311616+00:00 msrc_CVE-2021-3748 https://cve.radiocsirt.org/vuln/oesa-2021-1371 OESA-2021-1371 — qemu security update 2026-10-02T19:53:41.311634+00:00

Affected: openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP2: qemu

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-3748)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:3604-1 openSUSE-SU-2021:3604-1 — Security update for qemu 2026-10-02T19:53:41.311676+00:00

Security update for qemu

 https://cve.radiocsirt.org/vuln/rhsa-2021:4112 RHSA-2021:4112 — Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update 2026-10-02T19:53:41.311695+00:00

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3748 UBUNTU-CVE-2021-3748 2026-10-02T19:53:41.311711+00:00

Affected: Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0096 WID-SEC-W-2022-0096 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-02T19:53:41.311735+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.