https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:35:45.809641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07227 bdu:2025-07227 2026-10-04T19:35:45.928418+00:00 bdu:2025-07227 https://cve.radiocsirt.org/vuln/bell-cve-2024-56561 BELL-CVE-2024-56561 2026-10-04T19:35:45.928458+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0254 certfr-2025-avi-0254 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-04T19:35:45.928489+00:00 certfr-2025-avi-0254 https://cve.radiocsirt.org/vuln/euvd-2026-320747 EUVD-2026-320747 2026-10-04T19:35:45.928507+00:00 EUVD-2026-320747 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56561 fkie_cve-2024-56561 2026-10-04T19:35:45.928518+00:00

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()

pci_epc_destroy() invokes pci_bus_release_domain_nr() to release the PCI domain ID, but there are two issues:

- 'epc->dev' is passed to pci_bus_release_domain_nr() which was already freed by device_unregister(), leading to a use-after-free issue.

- Domain ID corresponds to the EPC device parent, so passing 'epc->dev' is also wrong.

Fix these issues by passing 'epc->dev.parent' to pci_bus_release_domain_nr() and also do it before device_unregister().

[mani: reworded subject and description]

 https://cve.radiocsirt.org/vuln/ghsa-q73c-hqqp-jcp7 GHSA-q73c-hqqp-jcp7 2026-10-04T19:35:45.928551+00:00

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()

pci_epc_destroy() invokes pci_bus_release_domain_nr() to release the PCI domain ID, but there are two issues:

- 'epc->dev' is passed to pci_bus_release_domain_nr() which was already freed by device_unregister(), leading to a use-after-free issue.

- Domain ID corresponds to the EPC device parent, so passing 'epc->dev' is also wrong.

Fix these issues by passing 'epc->dev.parent' to pci_bus_release_domain_nr() and also do it before device_unregister().

[mani: reworded subject and description]

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56561 UBUNTU-CVE-2024-56561 2026-10-04T19:35:45.928573+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 95 more

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() pci_epc_destroy() invokes pci_bus_release_domain_nr() to release the PCI domain ID, but there are two issues: - 'epc->dev' is passed to pci_bus_release_domain_nr() which was already freed by device_unregister(), leading to a use-after-free issue. - Domain ID corresponds to the EPC device parent, so passing 'epc->dev' is also wrong. Fix these issues by passing 'epc->dev.parent' to pci_bus_release_domain_nr() and also do it before device_unregister(). [mani: reworded subject and description]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3762 WID-SEC-W-2024-3762 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T19:35:45.928729+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um nicht näher beschriebene Effekte zu erzielen.