https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:49:16.757480+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09137 bdu:2025-09137 2026-10-03T05:49:17.405152+00:00 bdu:2025-09137 https://cve.radiocsirt.org/vuln/bell-cve-2025-38420 BELL-CVE-2025-38420 2026-10-03T05:49:17.405239+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0698 certfr-2025-avi-0698 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un… 2026-10-03T05:49:17.405287+00:00 certfr-2025-avi-0698 https://cve.radiocsirt.org/vuln/euvd-2026-314597 EUVD-2026-314597 2026-10-03T05:49:17.405316+00:00 EUVD-2026-314597 https://cve.radiocsirt.org/vuln/fkie_cve-2025-38420 fkie_cve-2025-38420 2026-10-03T05:49:17.405337+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: carl9170: do not ping device which has failed to load firmware

Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass 'ieee80211_register_hw()', an internal workqueue managed by 'ieee80211_queue_work()' is not yet created and an attempt to queue work on it causes null-ptr-deref.

[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

 https://cve.radiocsirt.org/vuln/ghsa-8249-rqx5-qf75 GHSA-8249-rqx5-qf75 2026-10-03T05:49:17.405383+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: carl9170: do not ping device which has failed to load firmware

Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass 'ieee80211_register_hw()', an internal workqueue managed by 'ieee80211_queue_work()' is not yet created and an attempt to queue work on it causes null-ptr-deref.

[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-38420 msrc_CVE-2025-38420 — wifi: carl9170: do not ping device which has failed to load firmware 2026-10-03T05:49:17.405415+00:00 msrc_CVE-2025-38420 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20081-1 openSUSE-SU-2025:20081-1 — Security update for the Linux Kernel 2026-10-03T05:49:17.405442+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2025:02846-1 SUSE-SU-2025:02846-1 — Security update for the Linux Kernel 2026-10-03T05:49:17.405922+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-38420 UBUNTU-CVE-2025-38420 2026-10-03T05:49:17.406007+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 213 more

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass 'ieee80211_register_hw()', an internal workqueue managed by 'ieee80211_queue_work()' is not yet created and an attempt to queue work on it causes null-ptr-deref. [1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1653 WID-SEC-W-2025-1653 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T05:49:17.406255+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.