https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:35:17.856858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0188 ALSA-2022:0188 — Important: kernel security and bug fix update 2026-10-03T01:35:18.285192+00:00

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL (CVE-2021-4155)

* kernel: fs_context: heap overflow in legacy parameter handling (CVE-2022-0185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel show “ BUG: scheduling while atomic:xxx“ and reboot when an uncorrectable memory error injection on AlmaLinux8.4 beta and GA (BZ#2008789)

* tcp: Sockets can be orphaned in the FIN-WAIT-1 or CLOSING states. (BZ#2021574)

* Hostnetwork pod to service backed by hostnetwork on the same node is not working with OVN Kubernetes (BZ#2024411)

* ice: bug fixes for kernel crashes (BZ#2026698)

* [AlmaLinux-8.6][SanityOnly] Backport leftover migrate_disable BPF related change (BZ#2027689)

* xfs: I_DONTCACHE flag is ignored [xfstests: xfs/177] (BZ#2028534)

* FIPS: deadlock between PID 1 and "modprobe crypto-jitterentropy_rng" at boot, preventing system to boot (BZ#2029365)

* AlmaLinux8.6: Backport upstream RCU commits up to v5.12 (BZ#2029449)

* i40e,ixgbe: revert XDP partial backport from kernel 5.13 (BZ#2029845)

* spec: Support separate tools build (BZ#2031053)

* RCU stall WARNING: at kernel/rcu/tree.c:1392 rcu_advance_cbs_nowake+0x51/0x60 (BZ#2032579)

* block: update to upstream v5.14 (BZ#2034396)

 https://cve.radiocsirt.org/vuln/bdu:2022-01472 bdu:2022-01472 2026-10-03T01:35:18.285349+00:00 bdu:2022-01472 https://cve.radiocsirt.org/vuln/certfr-2022-avi-048 certfr-2022-avi-048 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-03T01:35:18.285374+00:00 certfr-2022-avi-048 https://cve.radiocsirt.org/vuln/cnvd-2022-68564 cnvd-2022-68564 2026-10-03T01:35:18.285410+00:00 cnvd-2022-68564 https://cve.radiocsirt.org/vuln/euvd-2026-255874 EUVD-2026-255874 2026-10-03T01:35:18.285431+00:00 EUVD-2026-255874 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0185 fkie_cve-2022-0185 2026-10-03T01:35:18.285450+00:00

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/gsd-2022-0185 gsd-2022-0185 2026-10-03T01:35:18.285491+00:00 gsd-2022-0185 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0185 msrc_CVE-2022-0185 — A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi… 2026-10-03T01:35:18.285510+00:00 msrc_CVE-2022-0185 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0169-1 openSUSE-SU-2022:0169-1 — Security update for the Linux Kernel 2026-10-03T01:35:18.285544+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2022:0176 RHSA-2022:0176 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-03T01:35:18.285581+00:00

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL kernel: fs_context: heap overflow in legacy parameter handling

 https://cve.radiocsirt.org/vuln/suse-su-2022:0169-1 SUSE-SU-2022:0169-1 — Security update for the Linux Kernel 2026-10-03T01:35:18.285601+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0185 UBUNTU-CVE-2022-0185 2026-10-03T01:35:18.285623+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-ibm-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4 and 59 more

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0515 WID-SEC-W-2022-0515 — IBM Spectrum Protect: Mehrere Schwachstellen 2026-10-03T01:35:18.285722+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.