https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:45:02.813988+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6582 ALSA-2022:6582 — Important: kernel-rt security and bug fix update 2026-10-02T12:45:02.866864+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918) * kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.0.z3 Batch (BZ#2119577)

 https://cve.radiocsirt.org/vuln/bdu:2022-04090 bdu:2022-04090 2026-10-02T12:45:02.867011+00:00 bdu:2022-04090 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1002 certfr-2022-avi-1002 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-02T12:45:02.867044+00:00 certfr-2022-avi-1002 https://cve.radiocsirt.org/vuln/euvd-2026-12159 EUVD-2026-12159 2026-10-02T12:45:02.867073+00:00 EUVD-2026-12159 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2078 fkie_cve-2022-2078 2026-10-02T12:45:02.867095+00:00

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

 https://cve.radiocsirt.org/vuln/ghsa-j976-mwc8-7r2m GHSA-j976-mwc8-7r2m 2026-10-02T12:45:02.867133+00:00

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

 https://cve.radiocsirt.org/vuln/gsd-2022-2078 gsd-2022-2078 2026-10-02T12:45:02.867158+00:00 gsd-2022-2078 https://cve.radiocsirt.org/vuln/icsa-23-166-11 ICSA-23-166-11 — Siemens SIMATIC S7-1500 TM MFP Linux Kernel 2026-10-02T12:45:02.867175+00:00

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2078 msrc_CVE-2022-2078 — A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to t… 2026-10-02T12:45:02.867912+00:00 msrc_CVE-2022-2078 https://cve.radiocsirt.org/vuln/oesa-2022-1746 OESA-2022-1746 — kernel security update 2026-10-02T12:45:02.867955+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP3: kernel, openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.(CVE-2022-33981) A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.(CVE-2022-2078)

No description is available for this CVE.(CVE-2022-2153)

 https://cve.radiocsirt.org/vuln/rhsa-2022:6582 RHSA-2022:6582 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-02T12:45:02.868024+00:00

kernel: buffer overflow in nft_set_desc_concat_parse() kernel: heap overflow in nft_set_elem_init()

 https://cve.radiocsirt.org/vuln/rhsa-2022:6610 RHSA-2022:6610 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-02T12:45:02.868063+00:00

kernel: buffer overflow in nft_set_desc_concat_parse() kernel: heap overflow in nft_set_elem_init() kernel: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap kernel: ice: Fix memory corruption in VF driver

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2078 UBUNTU-CVE-2022-2078 2026-10-02T12:45:02.868102+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-hwe and 51 more

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0626 WID-SEC-W-2022-0626 — Linux Kernel: Schwachstelle ermöglicht Denial of Service und Codeausführung 2026-10-02T12:45:02.868260+00:00

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und möglicherweise beliebigen Code auszuführen.