https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:35:11.773732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:6964 ALSA-2024:6964 — Moderate: virt:rhel and virt-devel:rhel security update 2026-10-03T07:35:12.213654+00:00

Affected: AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409) * libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06925 bdu:2024-06925 2026-10-03T07:35:12.214077+00:00 bdu:2024-06925 https://cve.radiocsirt.org/vuln/bell-cve-2024-7409 BELL-CVE-2024-7409 2026-10-03T07:35:12.214104+00:00

Affected: Alpaquita:23: qemu, Alpaquita:stream: qemu

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 certfr-2025-avi-0967 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T07:35:12.214134+00:00 certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/euvd-2026-362214 EUVD-2026-362214 2026-10-03T07:35:12.214159+00:00 EUVD-2026-362214 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7409 fkie_cve-2024-7409 2026-10-03T07:35:12.214178+00:00

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

 https://cve.radiocsirt.org/vuln/ghsa-7c7g-wccp-rrhj GHSA-7c7g-wccp-rrhj 2026-10-03T07:35:12.214210+00:00

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-7409 msrc_CVE-2024-7409 — Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 2026-10-03T07:35:12.214236+00:00 msrc_CVE-2024-7409 https://cve.radiocsirt.org/vuln/oesa-2024-1988 OESA-2024-1988 — qemu security update 2026-10-03T07:35:12.214261+00:00

Affected: openEuler:20.03-LTS-SP4: qemu

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.(CVE-2024-7409)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14411-1 openSUSE-SU-2024:14411-1 — qemu-9.1.0-2.1 on GA media 2026-10-03T07:35:12.214297+00:00

qemu-9.1.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:10518 RHSA-2024:10518 — Red Hat Security Advisory: OpenShift Container Platform 4.17.7 bug fix and security update 2026-10-03T07:35:12.214325+00:00

go-retryablehttp: url might write sensitive information to log file QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass cross-spawn: regular expression denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2024:2983-1 SUSE-SU-2024:2983-1 — Security update for qemu 2026-10-03T07:35:12.214362+00:00

Security update for qemu

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7409 UBUNTU-CVE-2024-7409 2026-10-03T07:35:12.214397+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1750 WID-SEC-W-2024-1750 — QEMU: Schwachstelle ermöglicht Denial of Service 2026-10-03T07:35:12.214427+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.