https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:48:57.878517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:7077 ALSA-2023:7077 — Important: kernel security, bug fix, and enhancement update 2026-10-02T15:48:58.642648+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * kernel: net/sched: multiple vulnerabilities (CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208) * kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436) * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975) * kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594) * kernel: use after free flaw in l2cap_conn_del (CVE-2022-3640) * kernel: double free in usb_8dev_start_xmit (CVE-2022-28388) * kernel: vmwgfx: multiple vulnerabilities (CVE-2022-38457, CVE-2022-40133, CVE-2023-33951, CVE-2023-33952) * hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982) * kernel: Information leak in l2cap_parse_conf_req (CVE-2022-42895) * kernel: KVM: multiple vulnerabilities (CVE-2022-45869, CVE-2023-4155, CVE-2023-30456) * kernel: memory leak in ttusb_dec_exit_dvb (CVE-2022-45887) * kernel: speculative pointer dereference in do_prlimit (CVE-2023-0458) * kernel: use-after-free due to race condition in qdisc_graft (CVE-2023-0590) * kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597) * kernel: HID: check empty report_list in hid_validate_values (CVE-2023-1073) * kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074) * kernel: hid: Use After Free in asus_rem…

 https://cve.radiocsirt.org/vuln/bdu:2023-04663 bdu:2023-04663 2026-10-02T15:48:58.642803+00:00 bdu:2023-04663 https://cve.radiocsirt.org/vuln/bell-cve-2022-40982 Withdrawn: BELL-CVE-2022-40982 — CVE-2022-40982 does not affect BellSoft software 2026-10-02T15:48:58.642823+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0638 certfr-2023-avi-0638 — De multiples vulnérabilités ont été découvertes dans Citrix Hypervisor. Elles permettent à un attaquant de provoquer un… 2026-10-02T15:48:58.642840+00:00 certfr-2023-avi-0638 https://cve.radiocsirt.org/vuln/euvd-2026-216052 EUVD-2026-216052 2026-10-02T15:48:58.642855+00:00 EUVD-2026-216052 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40982 fkie_cve-2022-40982 2026-10-02T15:48:58.642866+00:00

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/gsd-2022-40982 gsd-2022-40982 2026-10-02T15:48:58.642888+00:00 gsd-2022-40982 https://cve.radiocsirt.org/vuln/icsa-23-257-05 ICSA-23-257-05 — Siemens SIMATIC IPCs 2026-10-02T15:48:58.642899+00:00

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/oesa-2023-1548 OESA-2023-1548 — microcode_ctl security update 2026-10-02T15:48:58.642917+00:00

Affected: openEuler:20.03-LTS-SP1: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs.

Security Fix(es):

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2022-33196)

Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.(CVE-2022-38090)

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.(CVE-2022-40982)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13112-1 openSUSE-SU-2024:13112-1 — kernel-devel-6.4.9-1.1 on GA media 2026-10-02T15:48:58.642944+00:00

kernel-devel-6.4.9-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:6901 RHSA-2023:6901 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update 2026-10-02T15:48:58.642961+00:00

kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c kernel: Rate limit overflow messages in r8152 in intr_callback kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c kernel: tun: avoid double free in tun_free_netdev kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c kernel: vmwgfx: use-after-free in vmw_cmd_res_check kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context hw: Intel: Gather Data Sampling (GDS) side channel vulnerability kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c kernel: KVM: x86/mmu: race condition in direct_page_fault() kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c kernel: use-after-free due to race condition in qdisc_graft() kernel: x86/mm: Randomize per-cpu entry area kernel: HID: check empty report_list in hid_validate_values() kernel: sctp: fail if no bound addresses can be used for a given scope kernel: net/tls: tls_is_tx_ready() checked list_entry kernel: hid: Use After Free in asus_remove() kernel: use-after-free in drivers/media/rc/ene_ir.c due to race condition kernel: hash collisions in the IPv6 connection lookup table kernel: ovl: fix use after free in struct ovl_aio_req kernel: denial of service in tipc_conn_close kernel: use-after-free bug in remove function xgene_hwmon_remove kernel: U…

 https://cve.radiocsirt.org/vuln/suse-su-2023:3289-1 SUSE-SU-2023:3289-1 — Security update for ucode-intel 2026-10-02T15:48:58.643057+00:00

Security update for ucode-intel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40982 UBUNTU-CVE-2022-40982 2026-10-02T15:48:58.643075+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure and 148 more

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2007 WID-SEC-W-2023-2007 — Intel Prozessoren: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T15:48:58.643519+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Intel Prozessoren ausnutzen, um Informationen offenzulegen.