https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:27.749294+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0113 ALSA-2024:0113 — Important: kernel security update 2026-10-02T23:52:27.824708+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 14 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use after free in unix_stream_sendpage (CVE-2023-4622) * kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633) * kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) * Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Backport OVS l4 Symmetric Hashing to almalinux-8 (JIRA:AlmaLinux-12746) * Unbounded memory usage by TCP for receive buffers (JIRA:AlmaLinux-15096) * various kind of guests freeze on rhel 8.8 (JIRA:AlmaLinux-15121) * AlmaLinux 8: netfilter: conntrack: Fix gre tunneling over ipv6 (JIRA:AlmaLinux-15259) * NFSv4.1 needs to handle ENOENT error from GETDEVICEINFO (JIRA:AlmaLinux-16407) * DM multipath showing failed path for an nvme-o-FC LUN when performing I/O operations (JIRA:AlmaLinux-14718)

 https://cve.radiocsirt.org/vuln/bdu:2023-07182 bdu:2023-07182 2026-10-02T23:52:27.824817+00:00 bdu:2023-07182 https://cve.radiocsirt.org/vuln/bell-cve-2023-5633 BELL-CVE-2023-5633 2026-10-02T23:52:27.824836+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0977 certfr-2023-avi-0977 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Ubuntu. Elles permettent à un attaquant de provo… 2026-10-02T23:52:27.824855+00:00 certfr-2023-avi-0977 https://cve.radiocsirt.org/vuln/euvd-2026-270678 EUVD-2026-270678 2026-10-02T23:52:27.824871+00:00 EUVD-2026-270678 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5633 fkie_cve-2023-5633 2026-10-02T23:52:27.824882+00:00

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

 https://cve.radiocsirt.org/vuln/ghsa-3hmc-jxr7-rw7j GHSA-3hmc-jxr7-rw7j 2026-10-02T23:52:27.824904+00:00

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

 https://cve.radiocsirt.org/vuln/gsd-2023-5633 gsd-2023-5633 2026-10-02T23:52:27.824919+00:00 gsd-2023-5633 https://cve.radiocsirt.org/vuln/msrc_cve-2023-5633 msrc_CVE-2023-5633 — Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling 2026-10-02T23:52:27.824929+00:00 msrc_CVE-2023-5633 https://cve.radiocsirt.org/vuln/rhsa-2024:0113 RHSA-2024:0113 — Red Hat Security Advisory: kernel security update 2026-10-02T23:52:27.824944+00:00

kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c kernel: UAF during login when accessing the shost ipaddress kernel: use after free in unix_stream_sendpage kernel: vmwgfx: reference count issue leads to use-after-free in surface handling amd: Return Address Predictor vulnerability leading to information disclosure kernel: netfilter: potential slab-out-of-bound access due to integer underflow

 https://cve.radiocsirt.org/vuln/rhsa-2024:0134 RHSA-2024:0134 — Red Hat Security Advisory: kernel-rt security update 2026-10-02T23:52:27.824969+00:00

kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c kernel: UAF during login when accessing the shost ipaddress kernel: use after free in unix_stream_sendpage kernel: vmwgfx: reference count issue leads to use-after-free in surface handling amd: Return Address Predictor vulnerability leading to information disclosure kernel: netfilter: potential slab-out-of-bound access due to integer underflow

 https://cve.radiocsirt.org/vuln/suse-su-2023:4730-1 SUSE-SU-2023:4730-1 — Security update for the Linux Kernel 2026-10-02T23:52:27.824992+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5633 UBUNTU-CVE-2023-5633 2026-10-02T23:52:27.825013+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 62 more

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086 WID-SEC-W-2024-1086 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T23:52:27.825100+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.