https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:19:42.951557+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:19409 ALSA-2025:19409 — Moderate: kernel security update 2026-10-03T07:19:43.307454+00:00

Affected: AlmaLinux:9: kernel, AlmaLinux:9: kernel-64k, AlmaLinux:9: kernel-64k-core, AlmaLinux:9: kernel-64k-debug, AlmaLinux:9: kernel-64k-debug-core, AlmaLinux:9: kernel-64k-debug-devel, AlmaLinux:9: kernel-64k-debug-devel-matched, AlmaLinux:9: kernel-64k-debug-modules, AlmaLinux:9: kernel-64k-debug-modules-core, AlmaLinux:9: kernel-64k-debug-modules-extra and 66 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-12788 bdu:2025-12788 2026-10-03T07:19:43.307634+00:00 bdu:2025-12788 https://cve.radiocsirt.org/vuln/bell-cve-2023-53494 BELL-CVE-2023-53494 2026-10-03T07:19:43.307664+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0895 certfr-2025-avi-0895 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-03T07:19:43.307694+00:00 certfr-2025-avi-0895 https://cve.radiocsirt.org/vuln/euvd-2026-345226 EUVD-2026-345226 2026-10-03T07:19:43.307732+00:00 EUVD-2026-345226 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53494 fkie_cve-2023-53494 2026-10-03T07:19:43.307746+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: xts - Handle EBUSY correctly

As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request.

However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

 https://cve.radiocsirt.org/vuln/ghsa-3646-gh58-xhcx GHSA-3646-gh58-xhcx 2026-10-03T07:19:43.307774+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: xts - Handle EBUSY correctly

As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request.

However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

 https://cve.radiocsirt.org/vuln/rhsa-2025:19409 RHSA-2025:19409 — Red Hat Security Advisory: kernel security update 2026-10-03T07:19:43.307793+00:00

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy kernel: crypto: xts - Handle EBUSY correctly kernel: ipv6: sr: Fix MAC comparison to be constant-time

 https://cve.radiocsirt.org/vuln/rhsa-2025:21051 RHSA-2025:21051 — Red Hat Security Advisory: kernel security update 2026-10-03T07:19:43.307816+00:00

kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy kernel: iomap: iomap: fix memory corruption when recording errors during writeback kernel: mm: fix zswap writeback race condition kernel: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data kernel: Bluetooth: L2CAP: Fix use-after-free kernel: pstore/ram: Check start of empty przs during init kernel: crypto: seqiv - Handle EBUSY correctly kernel: Bluetooth: Fix potential use-after-free when clear keys kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() kernel: crypto: xts - Handle EBUSY correctly kernel: eventpoll: Fix semi-unbounded recursion kernel: NFS: Fix a race when updating an existing write

 https://cve.radiocsirt.org/vuln/suse-su-2025:03615-1 SUSE-SU-2025:03615-1 — Security update for the Linux Kernel 2026-10-03T07:19:43.307877+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-53494 UBUNTU-CVE-2023-53494 2026-10-03T07:19:43.308241+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 139 more

In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2187 WID-SEC-W-2025-2187 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T07:19:43.308484+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um nicht nähere beschriebene Effekte zu verursachen.