https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:27:21.478132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-04805 bdu:2025-04805 2026-10-04T20:27:21.902455+00:00 bdu:2025-04805 https://cve.radiocsirt.org/vuln/bell-cve-2025-21906 BELL-CVE-2025-21906 2026-10-04T20:27:21.902517+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0449 certfr-2025-avi-0449 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-04T20:27:21.902555+00:00 certfr-2025-avi-0449 https://cve.radiocsirt.org/vuln/euvd-2026-346707 EUVD-2026-346707 2026-10-04T20:27:21.902575+00:00 EUVD-2026-346707 https://cve.radiocsirt.org/vuln/fkie_cve-2025-21906 fkie_cve-2025-21906 2026-10-04T20:27:21.902587+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: clean up ROC on failure

If the firmware fails to start the session protection, then we do call iwl_mvm_roc_finished() here, but that won't do anything at all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set. Set IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path. If it started successfully before, it's already set, so that doesn't matter, and if it didn't start it needs to be set to clean up.

Not doing so will lead to a WARN_ON() later on a fresh remain- on-channel, since the link is already active when activated as it was never deactivated.

 https://cve.radiocsirt.org/vuln/ghsa-3rmf-x7h3-c76w GHSA-3rmf-x7h3-c76w 2026-10-04T20:27:21.902619+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: clean up ROC on failure

If the firmware fails to start the session protection, then we do call iwl_mvm_roc_finished() here, but that won't do anything at all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set. Set IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path. If it started successfully before, it's already set, so that doesn't matter, and if it didn't start it needs to be set to clean up.

Not doing so will lead to a WARN_ON() later on a fresh remain- on-channel, since the link is already active when activated as it was never deactivated.

 https://cve.radiocsirt.org/vuln/suse-su-2025:01614-1 SUSE-SU-2025:01614-1 — Security update for the Linux Kernel 2026-10-04T20:27:21.902640+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21906 UBUNTU-CVE-2025-21906 2026-10-04T20:27:21.902763+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 76 more

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: clean up ROC on failure If the firmware fails to start the session protection, then we do call iwl_mvm_roc_finished() here, but that won't do anything at all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set. Set IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path. If it started successfully before, it's already set, so that doesn't matter, and if it didn't start it needs to be set to clean up. Not doing so will lead to a WARN_ON() later on a fresh remain- on-channel, since the link is already active when activated as it was never deactivated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0683 WID-SEC-W-2025-0683 — Linux Kernel: Mehrere Schwachstellen 2026-10-04T20:27:21.902891+00:00

Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial-of-Service auszulösen und um nicht näher spezifizierte Auswirkungen zu erzielen.