https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:28:41.882406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:7549 ALSA-2023:7549 — Important: kernel security and bug fix update 2026-10-03T05:28:42.567477+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 14 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163) * kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812) * kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178) * kernel: use-after-free due to race condition occurring in dvb_register_device() (CVE-2022-45884) * kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886) * kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c (CVE-2022-45919) * kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es): * Fix max integer mmu_invalidate_seq hanging vCPU (ALBZ#445) * Random delay receiving packets after bringing up VLAN on top of VF with vf-vlan-pruning enabled (BZ#2240750) * bpf_jit_limit hit again (BZ#2243011) * HPE Edgeline 920t resets during kdump context when ice driver is loaded and when system is booted with intel_iommu=on iommu=pt (BZ#2244625)

 https://cve.radiocsirt.org/vuln/bdu:2023-04465 bdu:2023-04465 2026-10-03T05:28:42.567620+00:00 bdu:2023-04465 https://cve.radiocsirt.org/vuln/bell-cve-2023-3812 Withdrawn: BELL-CVE-2023-3812 — CVE-2023-3812 does not affect BellSoft software 2026-10-03T05:28:42.567642+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0626 certfr-2023-avi-0626 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-03T05:28:42.567659+00:00 certfr-2023-avi-0626 https://cve.radiocsirt.org/vuln/euvd-2026-273568 EUVD-2026-273568 2026-10-03T05:28:42.567676+00:00 EUVD-2026-273568 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3812 fkie_cve-2023-3812 2026-10-03T05:28:42.567688+00:00

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/ghsa-v4mv-7g6h-5vh8 GHSA-v4mv-7g6h-5vh8 2026-10-03T05:28:42.567721+00:00

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/gsd-2023-3812 gsd-2023-3812 2026-10-03T05:28:42.567739+00:00 gsd-2023-3812 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3812 msrc_CVE-2023-3812 — Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 2026-10-03T05:28:42.567750+00:00 msrc_CVE-2023-3812 https://cve.radiocsirt.org/vuln/oesa-2023-1469 OESA-2023-1469 — kernel security update 2026-10-03T05:28:42.567768+00:00

Affected: openEuler:20.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2023-21255) A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. (CVE-2023-3609) An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. (CVE-2023-3611) A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms(…

 https://cve.radiocsirt.org/vuln/rhsa-2023:6799 RHSA-2023:6799 — Red Hat Security Advisory: kpatch-patch security update 2026-10-03T05:28:42.567809+00:00

kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

 https://cve.radiocsirt.org/vuln/rhsa-2023:7549 RHSA-2023:7549 — Red Hat Security Advisory: kernel security and bug fix update 2026-10-03T05:28:42.567833+00:00

kernel: use-after-free due to race condition occurring in dvb_register_device() kernel: use-after-free due to race condition occurring in dvb_net.c kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c kernel: use-after-free in smb2_is_status_io_timeout() kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags kernel: use after free in nvmet_tcp_free_crypto in NVMe kernel: mm/slab_common: slab_caches list corruption after kmem_cache_destroy()

 https://cve.radiocsirt.org/vuln/suse-su-2023:3172-1 SUSE-SU-2023:3172-1 — Security update for the Linux Kernel 2026-10-03T05:28:42.567864+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3812 UBUNTU-CVE-2023-3812 2026-10-03T05:28:42.567884+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 116 more

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1876 WID-SEC-W-2023-1876 — Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation oder Denial of Service 2026-10-03T05:28:42.568058+00:00

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand zu verursachen.