https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:55:55.330909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-12342 bdu:2026-12342 2026-10-02T16:55:55.467451+00:00 bdu:2026-12342 https://cve.radiocsirt.org/vuln/bell-cve-2026-31394 BELL-CVE-2026-31394 2026-10-02T16:55:55.467540+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0406 certfr-2026-avi-0406 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-02T16:55:55.467597+00:00 certfr-2026-avi-0406 https://cve.radiocsirt.org/vuln/euvd-2026-315554 EUVD-2026-315554 2026-10-02T16:55:55.467633+00:00 EUVD-2026-315554 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31394 fkie_cve-2026-31394 2026-10-02T16:55:55.467658+00:00

In the Linux kernel, the following vulnerability has been resolved:

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

ieee80211_chan_bw_change() iterates all stations and accesses link->reserved.oper via sta->sdata->link[link_id]. For stations on AP_VLAN interfaces (e.g. 4addr WDS clients), sta->sdata points to the VLAN sdata, whose link never participates in chanctx reservations. This leaves link->reserved.oper zero-initialized with chan == NULL, causing a NULL pointer dereference in __ieee80211_sta_cap_rx_bw() when accessing chandef->chan->band during CSA.

Resolve the VLAN sdata to its parent AP sdata using get_bss_sdata() before accessing link data.

[also change sta->sdata in ARRAY_SIZE even if it doesn't matter]

 https://cve.radiocsirt.org/vuln/ghsa-96f2-8m7p-q7j4 GHSA-96f2-8m7p-q7j4 2026-10-02T16:55:55.467722+00:00

In the Linux kernel, the following vulnerability has been resolved:

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

ieee80211_chan_bw_change() iterates all stations and accesses link->reserved.oper via sta->sdata->link[link_id]. For stations on AP_VLAN interfaces (e.g. 4addr WDS clients), sta->sdata points to the VLAN sdata, whose link never participates in chanctx reservations. This leaves link->reserved.oper zero-initialized with chan == NULL, causing a NULL pointer dereference in __ieee80211_sta_cap_rx_bw() when accessing chandef->chan->band during CSA.

Resolve the VLAN sdata to its parent AP sdata using get_bss_sdata() before accessing link data.

[also change sta->sdata in ARRAY_SIZE even if it doesn't matter]

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-31394 msrc_CVE-2026-31394 — mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations 2026-10-02T16:55:55.467771+00:00 msrc_CVE-2026-31394 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20826-1 openSUSE-SU-2026:20826-1 — Security update for the Linux Kernel 2026-10-02T16:55:55.467806+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/suse-su-2026:21834-1 SUSE-SU-2026:21834-1 — Security update for the Linux Kernel 2026-10-02T16:55:55.468031+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31394 UBUNTU-CVE-2026-31394 2026-10-02T16:55:55.468260+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 232 more

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ieee80211_chan_bw_change() iterates all stations and accesses link->reserved.oper via sta->sdata->link[link_id]. For stations on AP_VLAN interfaces (e.g. 4addr WDS clients), sta->sdata points to the VLAN sdata, whose link never participates in chanctx reservations. This leaves link->reserved.oper zero-initialized with chan == NULL, causing a NULL pointer dereference in __ieee80211_sta_cap_rx_bw() when accessing chandef->chan->band during CSA. Resolve the VLAN sdata to its parent AP sdata using get_bss_sdata() before accessing link data. [also change sta->sdata in ARRAY_SIZE even if it doesn't matter]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0985 WID-SEC-W-2026-0985 — Linux Kernel: Mehrere Schwachstellen 2026-10-02T16:55:55.468947+00:00

Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um unter anderem einen Denial of Service-Angriff auszuführen oder um Sicherheitsmechanismen zu umgehen.