https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:19:27.955189+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:13602 ALSA-2025:13602 — Moderate: kernel security update 2026-10-03T22:19:28.945632+00:00

Affected: AlmaLinux:9: kernel, AlmaLinux:9: kernel-64k, AlmaLinux:9: kernel-64k-core, AlmaLinux:9: kernel-64k-debug, AlmaLinux:9: kernel-64k-debug-core, AlmaLinux:9: kernel-64k-debug-devel, AlmaLinux:9: kernel-64k-debug-devel-matched, AlmaLinux:9: kernel-64k-debug-modules, AlmaLinux:9: kernel-64k-debug-modules-core, AlmaLinux:9: kernel-64k-debug-modules-extra and 66 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-08632 bdu:2025-08632 2026-10-03T22:19:28.945867+00:00 bdu:2025-08632 https://cve.radiocsirt.org/vuln/bell-cve-2025-38292 BELL-CVE-2025-38292 2026-10-03T22:19:28.945897+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0699 certfr-2025-avi-0699 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-03T22:19:28.945930+00:00 certfr-2025-avi-0699 https://cve.radiocsirt.org/vuln/euvd-2026-346996 EUVD-2026-346996 2026-10-03T22:19:28.945955+00:00 EUVD-2026-346996 https://cve.radiocsirt.org/vuln/fkie_cve-2025-38292 fkie_cve-2025-38292 2026-10-03T22:19:28.945973+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error.

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

 https://cve.radiocsirt.org/vuln/ghsa-mhmh-rgmh-rf63 GHSA-mhmh-rgmh-rf63 2026-10-03T22:19:28.946015+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error.

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-38292 msrc_CVE-2025-38292 — wifi: ath12k: fix invalid access to memory 2026-10-03T22:19:28.946047+00:00 msrc_CVE-2025-38292 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20081-1 openSUSE-SU-2025:20081-1 — Security update for the Linux Kernel 2026-10-03T22:19:28.946079+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2025:13598 RHSA-2025:13598 — Red Hat Security Advisory: kernel security update 2026-10-03T22:19:28.946516+00:00

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array kernel: crypto: algif_hash - fix double free in hash_accept kernel: mm/hugetlb: unshare page tables during VMA split, not before kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race kernel: PCI/pwrctrl: Cancel outstanding rescan work when unregistering kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds kernel: wifi: ath12k: fix invalid access to memory

 https://cve.radiocsirt.org/vuln/suse-su-2025:02853-1 SUSE-SU-2025:02853-1 — Security update for the Linux Kernel 2026-10-03T22:19:28.946566+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-38292 UBUNTU-CVE-2025-38292 2026-10-03T22:19:28.946781+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 121 more

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error. Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used. Compile tested only.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1522 WID-SEC-W-2025-1522 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T22:19:28.947028+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht spezifizierte Auswirkungen zu verursachen.