https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:11:26.985167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09124 bdu:2025-09124 2026-10-03T07:11:28.247003+00:00 bdu:2025-09124 https://cve.radiocsirt.org/vuln/bell-cve-2025-38416 BELL-CVE-2025-38416 2026-10-03T07:11:28.247081+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0698 certfr-2025-avi-0698 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un… 2026-10-03T07:11:28.247129+00:00 certfr-2025-avi-0698 https://cve.radiocsirt.org/vuln/euvd-2026-347034 EUVD-2026-347034 2026-10-03T07:11:28.247150+00:00 EUVD-2026-347034 https://cve.radiocsirt.org/vuln/fkie_cve-2025-38416 fkie_cve-2025-38416 2026-10-03T07:11:28.247162+00:00

In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: uart: Set tty->disc_data only in success path

Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->disc_data only on the success path, when opening of the NCI device and try_module_get() succeeds.

The code differs in error path in one aspect: tty->disc_data won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->disc_data=NULL" in nci_uart_tty_open().

 https://cve.radiocsirt.org/vuln/ghsa-9qw8-xx45-2wp7 GHSA-9qw8-xx45-2wp7 2026-10-03T07:11:28.247197+00:00

In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: uart: Set tty->disc_data only in success path

Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->disc_data only on the success path, when opening of the NCI device and try_module_get() succeeds.

The code differs in error path in one aspect: tty->disc_data won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->disc_data=NULL" in nci_uart_tty_open().

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-38416 msrc_CVE-2025-38416 — NFC: nci: uart: Set tty->disc_data only in success path 2026-10-03T07:11:28.247218+00:00 msrc_CVE-2025-38416 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20081-1 openSUSE-SU-2025:20081-1 — Security update for the Linux Kernel 2026-10-03T07:11:28.247238+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2025:02853-1 SUSE-SU-2025:02853-1 — Security update for the Linux Kernel 2026-10-03T07:11:28.247645+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-38416 UBUNTU-CVE-2025-38416 2026-10-03T07:11:28.247793+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge and 212 more

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->disc_data only on the success path, when opening of the NCI device and try_module_get() succeeds. The code differs in error path in one aspect: tty->disc_data won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->disc_data=NULL" in nci_uart_tty_open().

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1653 WID-SEC-W-2025-1653 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T07:11:28.248045+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.