https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:28:02.915700+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-23153 BELL-CVE-2026-23153 2026-10-05T02:28:03.018219+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/euvd-2026-315374 EUVD-2026-315374 2026-10-05T02:28:03.018266+00:00 EUVD-2026-315374 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23153 fkie_cve-2026-23153 2026-10-05T02:28:03.018280+00:00

In the Linux kernel, the following vulnerability has been resolved:

firewire: core: fix race condition against transaction list

The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completion event concurrently.

This commit fixes the bug by put timer start for split transaction expiration into the scope of lock. The value of jiffies in card structure is referred before acquiring the lock.

 https://cve.radiocsirt.org/vuln/ghsa-7q43-7j7f-g59m GHSA-7q43-7j7f-g59m 2026-10-05T02:28:03.018310+00:00

In the Linux kernel, the following vulnerability has been resolved:

firewire: core: fix race condition against transaction list

The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completion event concurrently.

This commit fixes the bug by put timer start for split transaction expiration into the scope of lock. The value of jiffies in card structure is referred before acquiring the lock.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23153 UBUNTU-CVE-2026-23153 2026-10-05T02:28:03.018329+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 81 more

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completion event concurrently. This commit fixes the bug by put timer start for split transaction expiration into the scope of lock. The value of jiffies in card structure is referred before acquiring the lock.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0421 WID-SEC-W-2026-0421 — Linux Kernel: Mehrere Schwachstellen 2026-10-05T02:28:03.018465+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.