https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:21:13.742307+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02700 bdu:2026-02700 2026-10-04T13:21:14.069765+00:00 bdu:2026-02700 https://cve.radiocsirt.org/vuln/bell-cve-2025-40021 BELL-CVE-2025-40021 2026-10-04T13:21:14.069816+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0941 certfr-2025-avi-0941 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-04T13:21:14.069849+00:00 certfr-2025-avi-0941 https://cve.radiocsirt.org/vuln/euvd-2026-314865 EUVD-2026-314865 2026-10-04T13:21:14.069868+00:00 EUVD-2026-314865 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40021 fkie_cve-2025-40021 2026-10-04T13:21:14.069879+00:00

In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

 https://cve.radiocsirt.org/vuln/ghsa-hmw5-3qc9-5j9m GHSA-hmw5-3qc9-5j9m 2026-10-04T13:21:14.069906+00:00

In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-40021 msrc_CVE-2025-40021 — tracing: dynevent: Add a missing lockdown check on dynevent 2026-10-04T13:21:14.069922+00:00 msrc_CVE-2025-40021 https://cve.radiocsirt.org/vuln/oesa-2025-2632 OESA-2025-2632 — kernel security update 2026-10-04T13:21:14.069938+00:00

Affected: openEuler:22.03-LTS-SP4: kernel

The Linux Kernel, the operating system core itself. Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefore, the reference count for `cp` can drop to zero, which will trigger a refcount use-after-free warning when `cache_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `cp` remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)

In the Linux kernel, the following vulnerability has been resolved:dm array: fix releasing a faulty array block twice in dm_array_cursor_endWhen dm_bm_read_lock() fails due to locking or checksum errors, itreleases the faulty block implicitly while leaving an invalid outputpointer behind. The caller of dm_bm_read_lock() should not operate onthis invalid dm_block p…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20172-1 openSUSE-SU-2025:20172-1 — Security update for the Linux Kernel 2026-10-04T13:21:14.070006+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2025:4422-1 SUSE-SU-2025:4422-1 — Security update for the Linux Kernel 2026-10-04T13:21:14.070078+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-40021 UBUNTU-CVE-2025-40021 2026-10-04T13:21:14.070137+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 195 more

In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2407 WID-SEC-W-2025-2407 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T13:21:14.070392+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.