https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:58:17.217601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:3708 ALSA-2023:3708 — Important: kernel-rt security and bug fix update 2026-10-02T13:58:17.311071+00:00

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-core, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel and 4 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235) * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233) * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002) * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124) * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194) * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [RT] Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2186853) * kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z1 Batch (BZ#2188313)

 https://cve.radiocsirt.org/vuln/bdu:2023-02407 bdu:2023-02407 2026-10-02T13:58:17.311233+00:00 bdu:2023-02407 https://cve.radiocsirt.org/vuln/bell-cve-2023-2235 Withdrawn: BELL-CVE-2023-2235 — CVE-2023-2235 does not affect BellSoft software 2026-10-02T13:58:17.311317+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0382 certfr-2023-avi-0382 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux de SUSE</span>. Elles permette… 2026-10-02T13:58:17.311336+00:00 certfr-2023-avi-0382 https://cve.radiocsirt.org/vuln/euvd-2026-349449 EUVD-2026-349449 2026-10-02T13:58:17.311353+00:00 EUVD-2026-349449 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2235 fkie_cve-2023-2235 2026-10-02T13:58:17.311364+00:00

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.

The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.

We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.

 https://cve.radiocsirt.org/vuln/ghsa-hwwj-xrc2-6hxg GHSA-hwwj-xrc2-6hxg 2026-10-02T13:58:17.311393+00:00

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.

The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.

We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.

 https://cve.radiocsirt.org/vuln/gsd-2023-2235 gsd-2023-2235 2026-10-02T13:58:17.311412+00:00 gsd-2023-2235 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2235 msrc_CVE-2023-2235 — Use-after-free in Linux kernel's Performance Events subsystem 2026-10-02T13:58:17.311423+00:00 msrc_CVE-2023-2235 https://cve.radiocsirt.org/vuln/rhsa-2023:3705 RHSA-2023:3705 — Red Hat Security Advisory: kpatch-patch security update 2026-10-02T13:58:17.311440+00:00

kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation

 https://cve.radiocsirt.org/vuln/rhsa-2023:3723 RHSA-2023:3723 — Red Hat Security Advisory: kernel security and bug fix update 2026-10-02T13:58:17.311460+00:00

Kernel: bluetooth: Unauthorized management command execution kernel: OOB access in the Linux kernel's XFS subsystem kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation kernel: crypto: qat - fix out-of-bounds read

 https://cve.radiocsirt.org/vuln/suse-su-2023:2231-1 SUSE-SU-2023:2231-1 — Security update for the Linux Kernel 2026-10-02T13:58:17.311491+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2235 UBUNTU-CVE-2023-2235 2026-10-02T13:58:17.311513+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 77 more

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability. We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1118 WID-SEC-W-2023-1118 — Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-02T13:58:17.311639+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen.