https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:34.442373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01196 bdu:2023-01196 2026-10-04T12:48:34.466034+00:00 bdu:2023-01196 https://cve.radiocsirt.org/vuln/bell-cve-2023-23586 Withdrawn: BELL-CVE-2023-23586 — CVE-2023-23586 does not affect BellSoft software 2026-10-04T12:48:34.466091+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0193 certfr-2023-avi-0193 — De multiples vulnérabilités ont été corrigées dans le noyau Linux de <span class="textit">DebianLTS</span>. Elles perme… 2026-10-04T12:48:34.466131+00:00 certfr-2023-avi-0193 https://cve.radiocsirt.org/vuln/cnvd-2023-54416 cnvd-2023-54416 2026-10-04T12:48:34.466160+00:00 cnvd-2023-54416 https://cve.radiocsirt.org/vuln/euvd-2026-222278 EUVD-2026-222278 2026-10-04T12:48:34.466186+00:00 EUVD-2026-222278 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23586 fkie_cve-2023-23586 2026-10-04T12:48:34.466203+00:00

Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit  788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring

 https://cve.radiocsirt.org/vuln/ghsa-h86q-32m7-8f9v GHSA-h86q-32m7-8f9v 2026-10-04T12:48:34.466239+00:00

Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring

 https://cve.radiocsirt.org/vuln/gsd-2023-23586 gsd-2023-23586 2026-10-04T12:48:34.466261+00:00 gsd-2023-23586 https://cve.radiocsirt.org/vuln/oesa-2023-1152 OESA-2023-1152 — kernel security update 2026-10-04T12:48:34.466272+00:00

Affected: openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring&apos;s io_worker threads, thus it is possible to insert a time namespace&apos;s vvar page to process&apos;s memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process&apos; memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring(CVE-2023-23586) In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.(CVE-2023-26607)

 https://cve.radiocsirt.org/vuln/suse-su-2023:2502-1 SUSE-SU-2023:2502-1 — Security update for the Linux Kernel 2026-10-04T12:48:34.466303+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-23586 UBUNTU-CVE-2023-23586 2026-10-04T12:48:34.466334+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 31 more

Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit  788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0563 WID-SEC-W-2023-0563 — Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T12:48:34.466400+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um Informationen offenzulegen.