https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:24:38.575188+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6002 ALSA-2022:6002 — Moderate: kernel-rt security and bug fix update 2026-10-03T04:24:38.863803+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * update RT source tree to the latest AlmaLinux-9.0.z2 Batch (BZ#2105450)

 https://cve.radiocsirt.org/vuln/bdu:2022-03400 bdu:2022-03400 2026-10-03T04:24:38.863906+00:00 bdu:2022-03400 https://cve.radiocsirt.org/vuln/bell-cve-2022-0494 Withdrawn: BELL-CVE-2022-0494 — CVE-2022-0494 does not affect BellSoft software 2026-10-03T04:24:38.863945+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-375 certfr-2022-avi-375 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoq… 2026-10-03T04:24:38.863962+00:00 certfr-2022-avi-375 https://cve.radiocsirt.org/vuln/euvd-2026-11062 EUVD-2026-11062 2026-10-03T04:24:38.863976+00:00 EUVD-2026-11062 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0494 fkie_cve-2022-0494 2026-10-03T04:24:38.863987+00:00

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-c6f2-mj5c-wfq2 GHSA-c6f2-mj5c-wfq2 2026-10-03T04:24:38.864009+00:00

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2022-0494 gsd-2022-0494 2026-10-03T04:24:38.864024+00:00 gsd-2022-0494 https://cve.radiocsirt.org/vuln/icsa-23-075-01 ICSA-23-075-01 — Siemens SCALANCE, RUGGEDCOM Third-Party 2026-10-03T04:24:38.864034+00:00

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds hea…

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0494 msrc_CVE-2022-0494 — A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kern… 2026-10-03T04:24:38.864225+00:00 msrc_CVE-2022-0494 https://cve.radiocsirt.org/vuln/oesa-2022-1604 OESA-2022-1604 — kernel security update 2026-10-03T04:24:38.864243+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel, openEuler:20.03-LTS-SP3: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.(CVE-2022-26490) A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.(CVE-2022-0854) ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2022-0886) A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.(CVE-2022-0494)

 https://cve.radiocsirt.org/vuln/rhsa-2022:6002 RHSA-2022:6002 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-03T04:24:38.864275+00:00

kernel: information leak in scsi_ioctl() kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c

 https://cve.radiocsirt.org/vuln/rhsa-2022:6003 RHSA-2022:6003 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T04:24:38.864293+00:00

kernel: information leak in scsi_ioctl() kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c kernel: KVM: x86/mmu: make apf token non-zero to fix bug kernel: NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0494 UBUNTU-CVE-2022-0494 2026-10-03T04:24:38.864314+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-kvm and 90 more

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.