https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:11:42.041163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2025-37753 Withdrawn: BELL-CVE-2025-37753 — CVE-2025-37753 does not affect BellSoft software 2026-10-05T03:11:42.050401+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/fkie_cve-2025-37753 fkie_cve-2025-37753 2026-10-05T03:11:42.050468+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

 https://cve.radiocsirt.org/vuln/ghsa-wcv7-qxr2-whrg GHSA-wcv7-qxr2-whrg 2026-10-05T03:11:42.050523+00:00

In the Linux kernel, the following vulnerability has been resolved:

s390/cpumf: Fix double free on error in cpumf_pmu_event_init()

In PMU event initialization functions - cpumsf_pmu_event_init() - cpumf_pmu_event_init() - cfdiag_event_init() the partially created event had to be removed when an error was detected. The event::event_init() member function had to release all resources it allocated in case of error. event::destroy() had to be called on freeing an event after it was successfully created and event::event_init() returned success.

With

commit c70ca298036c ("perf/core: Simplify the perf_event_alloc() error path")

this is not necessary anymore. The performance subsystem common code now always calls event::destroy() to clean up the allocated resources created during event initialization.

Remove the event::destroy() invocation in PMU event initialization or that function is called twice for each event that runs into an error condition in event creation.

This is the kernel log entry which shows up without the fix:

------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 0 PID: 43388 at lib/refcount.c:87 refcount_dec_not_one+0x74/0x90 CPU: 0 UID: 0 PID: 43388 Comm: perf Not tainted 6.15.0-20250407.rc1.git0.300.fc41.s390x+git #1 NONE Hardware name: IBM 3931 A01 704 (LPAR) Krnl PSW : 0704c00180000000 00000209cb2c1b88 (refcount_dec_not_one+0x78/0x90) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:0 PM:0 RI:0 EA:3 Krnl GPRS:…

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-37753 msrc_CVE-2025-37753 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-05T03:11:42.050616+00:00 msrc_CVE-2025-37753 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-37753 UBUNTU-CVE-2025-37753 2026-10-05T03:11:42.050656+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 115 more

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0922 WID-SEC-W-2025-0922 — Linux Kernel: Mehrere Schwachstellen 2026-10-05T03:11:42.051044+00:00

Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff und nicht näher spezifizierte Angriffe durchzuführen.