https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:59:54.715655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01860 bdu:2024-01860 2026-10-04T08:59:55.195069+00:00 bdu:2024-01860 https://cve.radiocsirt.org/vuln/bell-cve-2023-52454 BELL-CVE-2023-52454 2026-10-04T08:59:55.195138+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0226 certfr-2024-avi-0226 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux d'Ubuntu</span>. Certaines d'e… 2026-10-04T08:59:55.195171+00:00 certfr-2024-avi-0226 https://cve.radiocsirt.org/vuln/euvd-2026-344994 EUVD-2026-344994 2026-10-04T08:59:55.195202+00:00 EUVD-2026-344994 https://cve.radiocsirt.org/vuln/fkie_cve-2023-52454 fkie_cve-2023-52454 2026-10-04T08:59:55.195242+00:00

In the Linux kernel, the following vulnerability has been resolved:

nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length

If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec().

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110

Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq().

 https://cve.radiocsirt.org/vuln/ghsa-f594-3jwf-g74j GHSA-f594-3jwf-g74j 2026-10-04T08:59:55.195277+00:00

In the Linux kernel, the following vulnerability has been resolved:

nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length

If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec().

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110

Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq().

 https://cve.radiocsirt.org/vuln/gsd-2023-52454 gsd-2023-52454 2026-10-04T08:59:55.195299+00:00 gsd-2023-52454 https://cve.radiocsirt.org/vuln/oesa-2024-1394 OESA-2024-1394 — kernel security update 2026-10-04T08:59:55.195310+00:00

Affected: openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it&apos;s actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already. This patch changes the logic so that the information provided to the caller is set when a controller is found.(CVE-2021-46926) In the Linux kernel, the following vulnerability has been resolved: ASoC: q6afe-clocks: fix reprobing of the driver Q6afe-clocks driver can get reprobed. For example if the APR services are restarted after the firmware crash. However currently Q6afe-clocks driver will oops because hw.init will get cleared during first _probe call. Rewrite the driver to fill the clock data at runtime rather than using big static array of clocks.(CVE-2021-47037) In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpack_profile() described like &quot;profile :ns::samba-dcerpcd /usr/lib*/samba/{,samba/}samba-dcerpcd {...}&quot; a string &quot;:samba-dcerpcd&quot; is unpacked as a fully-qualified name and then passed to aa_splitn_fqname(). aa_splitn_fqname() treats &quot;:samba-dcerpcd&quot; as only…

 https://cve.radiocsirt.org/vuln/suse-su-2024:1320-1 SUSE-SU-2024:1320-1 — Security update for the Linux Kernel 2026-10-04T08:59:55.195418+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52454 UBUNTU-CVE-2023-52454 2026-10-04T08:59:55.195479+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 132 more

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec(). Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110 Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq().

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0475 WID-SEC-W-2024-0475 — Linux-Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe 2026-10-04T08:59:55.195674+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.