https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:04:22.510121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11321 bdu:2026-11321 2026-10-04T00:04:22.628694+00:00 bdu:2026-11321 https://cve.radiocsirt.org/vuln/bell-cve-2026-31478 BELL-CVE-2026-31478 2026-10-04T00:04:22.628734+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0547 certfr-2026-avi-0547 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-04T00:04:22.628765+00:00 certfr-2026-avi-0547 https://cve.radiocsirt.org/vuln/euvd-2026-347696 EUVD-2026-347696 2026-10-04T00:04:22.628782+00:00 EUVD-2026-347696 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31478 fkie_cve-2026-31478 2026-10-04T00:04:22.628794+00:00

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

After this commit (e2b76ab8b5c9 "ksmbd: add support for read compound"), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of ->Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.

 https://cve.radiocsirt.org/vuln/ghsa-hjcf-h98x-x745 GHSA-hjcf-h98x-x745 2026-10-04T00:04:22.628830+00:00

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

After this commit (e2b76ab8b5c9 "ksmbd: add support for read compound"), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of ->Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-31478 msrc_CVE-2026-31478 — ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() 2026-10-04T00:04:22.628852+00:00 msrc_CVE-2026-31478 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31478 UBUNTU-CVE-2026-31478 2026-10-04T00:04:22.628869+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 175 more

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5c9 "ksmbd: add support for read compound"), response buffer management was changed to use dynamic iov array. In the new design, smb2_calc_max_out_buf_len() expects the second argument (hdr2_len) to be the offset of ->Buffer field in the response structure, not a hardcoded magic number. Fix the remaining call sites to use the correct offsetof() value.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252 WID-SEC-W-2026-1252 — Linux Kernel: Mehrere Schwachstellen 2026-10-04T00:04:22.629123+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.