https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:34:32.450573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1469 ALSA-2023:1469 — Important: kernel-rt security and bug fix update 2026-10-02T19:34:32.839556+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460)

 https://cve.radiocsirt.org/vuln/bdu:2023-00718 bdu:2023-00718 2026-10-02T19:34:32.839655+00:00 bdu:2023-00718 https://cve.radiocsirt.org/vuln/bell-cve-2022-4269 Withdrawn: BELL-CVE-2022-4269 — CVE-2022-4269 does not affect BellSoft software 2026-10-02T19:34:32.839674+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0242 certfr-2023-avi-0242 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux de RedHat</span>. Elles permet… 2026-10-02T19:34:32.839691+00:00 certfr-2023-avi-0242 https://cve.radiocsirt.org/vuln/euvd-2026-229142 EUVD-2026-229142 2026-10-02T19:34:32.839707+00:00 EUVD-2026-229142 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4269 fkie_cve-2022-4269 2026-10-02T19:34:32.839718+00:00

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.

 https://cve.radiocsirt.org/vuln/ghsa-xv49-pvqx-8xr6 GHSA-xv49-pvqx-8xr6 2026-10-02T19:34:32.839743+00:00

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.

 https://cve.radiocsirt.org/vuln/gsd-2022-4269 gsd-2022-4269 2026-10-02T19:34:32.839759+00:00 gsd-2022-4269 https://cve.radiocsirt.org/vuln/icsa-23-166-11 ICSA-23-166-11 — Siemens SIMATIC S7-1500 TM MFP Linux Kernel 2026-10-02T19:34:32.839770+00:00

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…

 https://cve.radiocsirt.org/vuln/oesa-2023-1187 OESA-2023-1187 — kernel security update 2026-10-02T19:34:32.840173+00:00

Affected: openEuler:20.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.(CVE-2022-29901) A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action &quot;mirred&quot;) a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.(CVE-2022-4269) A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.(CVE-2023-1079)

Kernel: denial of service in tipc_conn_close(CVE-2023-1382) do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel throug…

 https://cve.radiocsirt.org/vuln/rhsa-2023:1130 RHSA-2023:1130 — Red Hat Security Advisory: kernel security and bug fix update 2026-10-02T19:34:32.840213+00:00

kernel: memory corruption in AX88179_178A based USB ethernet device. kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: mm/mremap.c use-after-free vulnerability kernel: IPv6: panic in fib6_rule_suppress when fib6_rule_lookup fails

 https://cve.radiocsirt.org/vuln/rhsa-2023:1470 RHSA-2023:1470 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-02T19:34:32.840238+00:00

kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: tun: avoid double free in tun_free_netdev kernel: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

 https://cve.radiocsirt.org/vuln/suse-su-2023:2502-1 SUSE-SU-2023:2502-1 — Security update for the Linux Kernel 2026-10-02T19:34:32.840260+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4269 UBUNTU-CVE-2022-4269 2026-10-02T19:34:32.840287+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 123 more

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2220 WID-SEC-W-2022-2220 — Linux Kernel: Schwachstelle ermöglicht Denial of Service 2026-10-02T19:34:32.840462+00:00

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.