https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:26:35.242457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10523 bdu:2026-10523 2026-10-02T15:26:35.551742+00:00 bdu:2026-10523 https://cve.radiocsirt.org/vuln/bell-cve-2025-68324 BELL-CVE-2025-68324 2026-10-02T15:26:35.551815+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-02T15:26:35.551865+00:00 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/euvd-2026-315107 EUVD-2026-315107 2026-10-02T15:26:35.551885+00:00 EUVD-2026-315107 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68324 fkie_cve-2025-68324 2026-10-02T15:26:35.551898+00:00

In the Linux kernel, the following vulnerability has been resolved:

scsi: imm: Fix use-after-free bug caused by unfinished delayed work

The delayed work item 'imm_tq' is initialized in imm_attach() and scheduled via imm_queuecommand() for processing SCSI commands. When the IMM parallel port SCSI host adapter is detached through imm_detach(), the imm_struct device instance is deallocated.

However, the delayed work might still be pending or executing when imm_detach() is called, leading to use-after-free bugs when the work function imm_interrupt() accesses the already freed imm_struct memory.

The race condition can occur as follows:

CPU 0(detach thread) | CPU 1 | imm_queuecommand() | imm_queuecommand_lck() imm_detach() | schedule_delayed_work() kfree(dev) //FREE | imm_interrupt() | dev = container_of(...) //USE dev-> //USE

Add disable_delayed_work_sync() in imm_detach() to guarantee proper cancellation of the delayed work item before imm_struct is deallocated.

 https://cve.radiocsirt.org/vuln/ghsa-v78j-7qmc-c42v GHSA-v78j-7qmc-c42v 2026-10-02T15:26:35.551939+00:00

In the Linux kernel, the following vulnerability has been resolved:

scsi: imm: Fix use-after-free bug caused by unfinished delayed work

The delayed work item 'imm_tq' is initialized in imm_attach() and scheduled via imm_queuecommand() for processing SCSI commands. When the IMM parallel port SCSI host adapter is detached through imm_detach(), the imm_struct device instance is deallocated.

However, the delayed work might still be pending or executing when imm_detach() is called, leading to use-after-free bugs when the work function imm_interrupt() accesses the already freed imm_struct memory.

The race condition can occur as follows:

CPU 0(detach thread) | CPU 1 | imm_queuecommand() | imm_queuecommand_lck() imm_detach() | schedule_delayed_work() kfree(dev) //FREE | imm_interrupt() | dev = container_of(...) //USE dev-> //USE

Add disable_delayed_work_sync() in imm_detach() to guarantee proper cancellation of the delayed work item before imm_struct is deallocated.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-68324 msrc_CVE-2025-68324 — scsi: imm: Fix use-after-free bug caused by unfinished delayed work 2026-10-02T15:26:35.551966+00:00 msrc_CVE-2025-68324 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15836-1 openSUSE-SU-2025:15836-1 — kernel-devel-6.18.2-1.1 on GA media 2026-10-02T15:26:35.551984+00:00

kernel-devel-6.18.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22108-1 SUSE-SU-2026:22108-1 — Security update for the Linux Kernel 2026-10-02T15:26:35.552010+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68324 UBUNTU-CVE-2025-68324 2026-10-02T15:26:35.552088+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 233 more

In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is initialized in imm_attach() and scheduled via imm_queuecommand() for processing SCSI commands. When the IMM parallel port SCSI host adapter is detached through imm_detach(), the imm_struct device instance is deallocated. However, the delayed work might still be pending or executing when imm_detach() is called, leading to use-after-free bugs when the work function imm_interrupt() accesses the already freed imm_struct memory. The race condition can occur as follows: CPU 0(detach thread) | CPU 1 | imm_queuecommand() | imm_queuecommand_lck() imm_detach() | schedule_delayed_work() kfree(dev) //FREE | imm_interrupt() | dev = container_of(...) //USE dev-> //USE Add disable_delayed_work_sync() in imm_detach() to guarantee proper cancellation of the delayed work item before imm_struct is deallocated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2904 WID-SEC-W-2025-2904 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T15:26:35.552435+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschrieben Auswirkungen zu erzielen.