https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:22:46.219421+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00733 bdu:2024-00733 2026-10-04T15:22:46.585223+00:00 bdu:2024-00733 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0242 certfr-2024-avi-0242 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux de SUSE</span>. Certaines d'en… 2026-10-04T15:22:46.585295+00:00 certfr-2024-avi-0242 https://cve.radiocsirt.org/vuln/cnvd-2024-06428 cnvd-2024-06428 2026-10-04T15:22:46.585317+00:00 cnvd-2024-06428 https://cve.radiocsirt.org/vuln/euvd-2026-259402 EUVD-2026-259402 2026-10-04T15:22:46.585330+00:00 EUVD-2026-259402 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23851 fkie_cve-2024-23851 2026-10-04T15:22:46.585341+00:00

copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

 https://cve.radiocsirt.org/vuln/ghsa-hm4h-jq5c-c933 GHSA-hm4h-jq5c-c933 2026-10-04T15:22:46.585371+00:00

copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

 https://cve.radiocsirt.org/vuln/gsd-2024-23851 gsd-2024-23851 2026-10-04T15:22:46.585387+00:00 gsd-2024-23851 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23851 msrc_CVE-2024-23851 — copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes… 2026-10-04T15:22:46.585398+00:00 msrc_CVE-2024-23851 https://cve.radiocsirt.org/vuln/oesa-2024-1283 OESA-2024-1283 — kernel security update 2026-10-04T15:22:46.585415+00:00

Affected: openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.(CVE-2023-52436) In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker&apos;s callback The mmap read lock is used during the shrinker&apos;s callback, which means that using alloc-&gt;vma pointer isn&apos;t safe as it can race with munmap(). As of commit dd2283f2605e (&quot;mm: mmap: zap pages with read mmap_sem in munmap&quot;) the mmap lock is downgraded after the vma has been isolated. I was able to reproduce this issue by manually adding some delays and triggering page reclaiming through the shrinker&apos;s debug sysfs. The following KASAN report confirms the UAF: ================================================================== BUG: KASAN: slab-use-after-free in zap_page_range_single+0x470/0x4b8 Read of size 8 at addr ffff356ed50e50f0 by task bash/478 CPU: 1 PID: 478 Comm: bash Not tainted 6.6.0-rc5-00055-g1c8b86a3799f-dirty #70 Hardware name: linux,dummy-virt (DT) Call trace: zap_page_range_single+0x470/0x4b8 binder_alloc_free_page+0x608/0xadc __list_lru_walk_one+0x130/0x3b0 list_lru_walk_node+0xc4/0x22c binder_shrink_scan+0x108/0x1…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13696-1 openSUSE-SU-2024:13696-1 — kernel-devel-6.7.5-1.1 on GA media 2026-10-04T15:22:46.585464+00:00

kernel-devel-6.7.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:0855-1 SUSE-SU-2024:0855-1 — Security update for the Linux Kernel 2026-10-04T15:22:46.585484+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23851 UBUNTU-CVE-2024-23851 2026-10-04T15:22:46.585530+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 159 more

copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0177 WID-SEC-W-2024-0177 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T15:22:46.585755+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.