https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:17:32.591782+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1469 ALSA-2023:1469 — Important: kernel-rt security and bug fix update 2026-10-03T02:17:33.329777+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460)

 https://cve.radiocsirt.org/vuln/bdu:2023-01797 bdu:2023-01797 2026-10-03T02:17:33.329916+00:00 bdu:2023-01797 https://cve.radiocsirt.org/vuln/bell-cve-2022-4744 Withdrawn: BELL-CVE-2022-4744 — CVE-2022-4744 does not affect BellSoft software 2026-10-03T02:17:33.329935+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0279 certfr-2023-avi-0279 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Elles permettent à un attaquant de provo… 2026-10-03T02:17:33.329952+00:00 certfr-2023-avi-0279 https://cve.radiocsirt.org/vuln/cnvd-2023-34466 cnvd-2023-34466 2026-10-03T02:17:33.329967+00:00 cnvd-2023-34466 https://cve.radiocsirt.org/vuln/euvd-2026-217614 EUVD-2026-217614 2026-10-03T02:17:33.329979+00:00 EUVD-2026-217614 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4744 fkie_cve-2022-4744 2026-10-03T02:17:33.329989+00:00

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/ghsa-5r2r-5wx4-7x33 GHSA-5r2r-5wx4-7x33 2026-10-03T02:17:33.330014+00:00

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/gsd-2022-4744 gsd-2022-4744 2026-10-03T02:17:33.330031+00:00 gsd-2022-4744 https://cve.radiocsirt.org/vuln/icsa-24-046-11 ICSA-24-046-11 — Siemens SCALANCE XCM-/XRM-300 2026-10-03T02:17:33.330041+00:00

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability. An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create…

 https://cve.radiocsirt.org/vuln/oesa-2023-1228 OESA-2023-1228 — kernel security update 2026-10-03T02:17:33.330445+00:00

Affected: openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea(CVE-2023-1611) A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.(CVE-2023-1670) A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.(CVE-2023-1859)

A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.(CVE-2023-1582)

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2022-4744)

 https://cve.radiocsirt.org/vuln/rhsa-2023:1466 RHSA-2023:1466 — Red Hat Security Advisory: kpatch-patch security update 2026-10-03T02:17:33.330479+00:00

kernel: tun: avoid double free in tun_free_netdev

 https://cve.radiocsirt.org/vuln/rhsa-2023:1470 RHSA-2023:1470 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T02:17:33.330497+00:00

kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: tun: avoid double free in tun_free_netdev kernel: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

 https://cve.radiocsirt.org/vuln/suse-su-2023:1800-1 SUSE-SU-2023:1800-1 — Security update for the Linux Kernel 2026-10-03T02:17:33.330519+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4744 UBUNTU-CVE-2022-4744 2026-10-03T02:17:33.330546+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 31 more

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0761 WID-SEC-W-2023-0761 — Linux Kernel: Schwachstelle ermöglicht Denial of Service 2026-10-03T02:17:33.330612+00:00

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Zustand herbeizuführen und um potenziell seine Privilegien zu erhöhen.