https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:46:37.451784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10616 bdu:2026-10616 2026-10-04T06:46:37.484967+00:00 bdu:2026-10616 https://cve.radiocsirt.org/vuln/bell-cve-2026-23234 BELL-CVE-2026-23234 2026-10-04T06:46:37.485010+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0291 certfr-2026-avi-0291 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un… 2026-10-04T06:46:37.485042+00:00 certfr-2026-avi-0291 https://cve.radiocsirt.org/vuln/euvd-2026-315419 EUVD-2026-315419 2026-10-04T06:46:37.485060+00:00 EUVD-2026-315419 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23234 fkie_cve-2026-23234 2026-10-04T06:46:37.485072+00:00

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid UAF in f2fs_write_end_io()

As syzbot reported an use-after-free issue in f2fs_write_end_io().

It is caused by below race condition:

loop device umount - worker_thread - loop_process_work - do_req_filebacked - lo_rw_aio - lo_rw_aio_complete - blk_mq_end_request - blk_update_request - f2fs_write_end_io - dec_page_count - folio_end_writeback - kill_f2fs_super - kill_block_super - f2fs_put_super : free(sbi) : get_pages(, F2FS_WB_CP_DATA) accessed sbi which is freed

In kill_f2fs_super(), we will drop all page caches of f2fs inodes before call free(sbi), it guarantee that all folios should end its writeback, so it should be safe to access sbi before last folio_end_writeback().

Let's relocate ckpt thread wakeup flow before folio_end_writeback() to resolve this issue.

 https://cve.radiocsirt.org/vuln/ghsa-chrj-6658-798c GHSA-chrj-6658-798c 2026-10-04T06:46:37.485105+00:00

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid UAF in f2fs_write_end_io()

As syzbot reported an use-after-free issue in f2fs_write_end_io().

It is caused by below race condition:

loop device umount - worker_thread - loop_process_work - do_req_filebacked - lo_rw_aio - lo_rw_aio_complete - blk_mq_end_request - blk_update_request - f2fs_write_end_io - dec_page_count - folio_end_writeback - kill_f2fs_super - kill_block_super - f2fs_put_super : free(sbi) : get_pages(, F2FS_WB_CP_DATA) accessed sbi which is freed

In kill_f2fs_super(), we will drop all page caches of f2fs inodes before call free(sbi), it guarantee that all folios should end its writeback, so it should be safe to access sbi before last folio_end_writeback().

Let's relocate ckpt thread wakeup flow before folio_end_writeback() to resolve this issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23234 msrc_CVE-2026-23234 — f2fs: fix to avoid UAF in f2fs_write_end_io() 2026-10-04T06:46:37.485128+00:00 msrc_CVE-2026-23234 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10387-1 openSUSE-SU-2026:10387-1 — kernel-devel-6.19.8-1.1 on GA media 2026-10-04T06:46:37.485145+00:00

kernel-devel-6.19.8-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23234 UBUNTU-CVE-2026-23234 2026-10-04T06:46:37.485171+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 232 more

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_write_end_io(). It is caused by below race condition: loop device umount - worker_thread - loop_process_work - do_req_filebacked - lo_rw_aio - lo_rw_aio_complete - blk_mq_end_request - blk_update_request - f2fs_write_end_io - dec_page_count - folio_end_writeback - kill_f2fs_super - kill_block_super - f2fs_put_super : free(sbi) : get_pages(, F2FS_WB_CP_DATA) accessed sbi which is freed In kill_f2fs_super(), we will drop all page caches of f2fs inodes before call free(sbi), it guarantee that all folios should end its writeback, so it should be safe to access sbi before last folio_end_writeback(). Let's relocate ckpt thread wakeup flow before folio_end_writeback() to resolve this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0614 WID-SEC-W-2026-0614 — Linux Kernel: Mehrere Schwachstellen 2026-10-04T06:46:37.485446+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service-Bedingung führen oder eine Speicherbeschädigung verursachen können.