https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:53:38.317360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03767 bdu:2024-03767 2026-10-10T14:53:38.323018+00:00 bdu:2024-03767 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0226 certfr-2024-avi-0226 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux d'Ubuntu</span>. Certaines d'e… 2026-10-10T14:53:38.323058+00:00 certfr-2024-avi-0226 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26624 fkie_cve-2024-26624 2026-10-10T14:53:38.323078+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

 https://cve.radiocsirt.org/vuln/ghsa-5436-7p32-x65c GHSA-5436-7p32-x65c 2026-10-10T14:53:38.323104+00:00

In the Linux kernel, the following vulnerability has been resolved:

af_unix: fix lockdep positive in sk_diag_dump_icons()

syzbot reported a lockdep splat [1].

Blamed commit hinted about the possible lockdep violation, and code used unix_state_lock_nested() in an attempt to silence lockdep.

It is not sufficient, because unix_state_lock_nested() is already used from unix_state_double_lock().

We need to use a separate subclass.

This patch adds a distinct enumeration to make things more explicit.

Also use swap() in unix_state_double_lock() as a clean up.

v2: add a missing inline keyword to unix_state_lock_nested()

[1] WARNING: possible circular locking dependency detected 6.8.0-rc1-syzkaller-00356-g8a696a29c690 #0 Not tainted

syz-executor.1/2542 is trying to acquire lock: ffff88808b5df9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: skb_queue_tail+0x36/0x120 net/core/skbuff.c:3863

but task is already holding lock: ffff88808b5dfe70 (&u->lock/1){+.+.}-{2:2}, at: unix_dgram_sendmsg+0xfc7/0x2200 net/unix/af_unix.c:2089

which lock already depends on the new lock.

the existing dependency chain (in reverse order) is:

-> #1 (&u->lock/1){+.+.}-{2:2}: lock_acquire+0x1e3/0x530 kernel/locking/lockdep.c:5754 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 sk_diag_dump_icons net/unix/diag.c:87 [inline] sk_diag_fill+0x6ea/0xfe0 net/unix/diag.c:157 sk_diag_dump net/unix/diag.c:196 [inline] unix_diag_dump+0x3e9/0x630 net/unix/diag…

 https://cve.radiocsirt.org/vuln/gsd-2024-26624 gsd-2024-26624 2026-10-10T14:53:38.323153+00:00 gsd-2024-26624 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-26624 UBUNTU-CVE-2024-26624 2026-10-10T14:53:38.323165+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 54 more

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0561 WID-SEC-W-2024-0561 — Linux Kernel: Mehrere Schwachstellen 2026-10-10T14:53:38.323253+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.