<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T17:27:18.173951+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2024-07843</id>
    <title>bdu:2024-07843</title>
    <updated>2026-10-03T17:27:18.306455+00:00</updated>
    <content>bdu:2024-07843</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2024-07843"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2023-52480</id>
    <title>BELL-CVE-2023-52480</title>
    <updated>2026-10-03T17:27:18.306508+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2023-52480"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0301</id>
    <title>certfr-2024-avi-0301 — De multiples vulnérabilités ont été découvertes dans &lt;span
class="textit"&gt;le noyau Linux d'Ubuntu&lt;/span&gt;. Certaines d'e…</title>
    <updated>2026-10-03T17:27:18.306542+00:00</updated>
    <content>certfr-2024-avi-0301</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2024-avi-0301"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-353076</id>
    <title>EUVD-2026-353076</title>
    <updated>2026-10-03T17:27:18.306561+00:00</updated>
    <content>EUVD-2026-353076</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-353076"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2023-52480</id>
    <title>fkie_cve-2023-52480</title>
    <updated>2026-10-03T17:27:18.306573+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>ksmbd: fix race condition between session lookup and expire</p>
<p>Thread A                        +  Thread B
 ksmbd_session_lookup            |  smb2_sess_setup
   sess = xa_load                |
                                 |
                                 |    xa_erase(&amp;conn-&gt;sessions, sess-&gt;id);
                                 |
                                 |    ksmbd_session_destroy(sess) --&gt; kfree(sess)
                                 |
   // UAF!                       |
   sess-&gt;last_active = jiffies   |
                                 +</p>
<p>This patch add rwsem to fix race condition between ksmbd_session_lookup
and ksmbd_expire_session.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2023-52480"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-v2j2-ph6r-wrg9</id>
    <title>GHSA-v2j2-ph6r-wrg9</title>
    <updated>2026-10-03T17:27:18.306606+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>ksmbd: fix race condition between session lookup and expire</p>
<p>Thread A                        +  Thread B
 ksmbd_session_lookup            |  smb2_sess_setup
   sess = xa_load                |
                                 |
                                 |    xa_erase(&amp;conn-&gt;sessions, sess-&gt;id);
                                 |
                                 |    ksmbd_session_destroy(sess) --&gt; kfree(sess)
                                 |
   // UAF!                       |
   sess-&gt;last_active = jiffies   |
                                 +</p>
<p>This patch add rwsem to fix race condition between ksmbd_session_lookup
and ksmbd_expire_session.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-v2j2-ph6r-wrg9"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2023-52480</id>
    <title>gsd-2023-52480</title>
    <updated>2026-10-03T17:27:18.306628+00:00</updated>
    <content>gsd-2023-52480</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2023-52480"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2025-1095</id>
    <title>OESA-2025-1095 — kernel security update</title>
    <updated>2026-10-03T17:27:18.306639+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: kernel</p>
<p>The Linux Kernel, the operating system core itself.

Security Fix(es):</p>
<p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>ksmbd: fix race condition between session lookup and expire</p>
<p>Thread A                        +  Thread B
 ksmbd_session_lookup            |  smb2_sess_setup
   sess = xa_load                |
                                 |
                                 |    xa_erase(&amp;amp;conn-&amp;gt;sessions, sess-&amp;gt;id);
                                 |
                                 |    ksmbd_session_destroy(sess) --&amp;gt; kfree(sess)
                                 |
   // UAF!                       |
   sess-&amp;gt;last_active = jiffies   |
                                 +</p>
<p>This patch add rwsem to fix race condition between ksmbd_session_lookup
and ksmbd_expire_session.(CVE-2023-52480)</p>
<p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>RDMA/siw: Fix connection failure handling</p>
<p>In case immediate MPA request processing fails, the newly
created endpoint unlinks the listening endpoint and is
ready to be dropped. This special case was not handled
correctly by the code handling the later TCP socket close,
causing a NULL dereference crash in siw_cm_work_handler()
when dereferencing a NULL listener. We now also cancel
the useless MPA timeout, if immediate MPA request
processing fails.</p>
<p>This patch furthermore simplifies MPA processing in general:
Scheduling a useless TCP socket read in sk_data_ready() upcall
is now surpressed,…</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2025-1095"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52480</id>
    <title>UBUNTU-CVE-2023-52480</title>
    <updated>2026-10-03T17:27:18.306863+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 66 more</p>
<p>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire  Thread A                        +  Thread B  ksmbd_session_lookup            |  smb2_sess_setup    sess = xa_load                |                                  |                                  |    xa_erase(&amp;conn-&gt;sessions, sess-&gt;id);                                  |                                  |    ksmbd_session_destroy(sess) --&gt; kfree(sess)                                  |    // UAF!                       |    sess-&gt;last_active = jiffies   |                                  + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52480"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0511</id>
    <title>WID-SEC-W-2024-0511 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe</title>
    <updated>2026-10-03T17:27:18.306979+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0511"/>
  </entry>
</feed>
