<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T20:58:03.946242+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2026:45114</id>
    <title>ALSA-2026:45114 — Important: kernel security update</title>
    <updated>2026-10-03T20:58:04.221198+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more</p>
<p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p>
<p>Security Fix(es):</p>
<p>* kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
  * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
  * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2026:45114"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2026-31692</id>
    <title>BELL-CVE-2026-31692</title>
    <updated>2026-10-03T20:58:04.221421+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2026-31692"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2026-avi-0983</id>
    <title>certfr-2026-avi-0983 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un…</title>
    <updated>2026-10-03T20:58:04.221451+00:00</updated>
    <content>certfr-2026-avi-0983</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2026-avi-0983"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-315662</id>
    <title>EUVD-2026-315662</title>
    <updated>2026-10-03T20:58:04.221470+00:00</updated>
    <content>EUVD-2026-315662</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-315662"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-31692</id>
    <title>fkie_cve-2026-31692</title>
    <updated>2026-10-03T20:58:04.221483+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>rtnetlink: add missing netlink_ns_capable() check for peer netns</p>
<p>rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer
network namespace when creating paired devices (veth, vxcan,
netkit). This allows an unprivileged user with a user namespace
to create interfaces in arbitrary network namespaces, including
init_net.</p>
<p>Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer
namespace before allowing device creation to proceed.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-31692"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-xpxm-p6f4-j2mf</id>
    <title>GHSA-xpxm-p6f4-j2mf</title>
    <updated>2026-10-03T20:58:04.221510+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>In the Linux kernel, the following vulnerability has been resolved:</p>
<p>rtnetlink: add missing netlink_ns_capable() check for peer netns</p>
<p>rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer
network namespace when creating paired devices (veth, vxcan,
netkit). This allows an unprivileged user with a user namespace
to create interfaces in arbitrary network namespaces, including
init_net.</p>
<p>Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer
namespace before allowing device creation to proceed.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-xpxm-p6f4-j2mf"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2026-31692</id>
    <title>msrc_CVE-2026-31692 — rtnetlink: add missing netlink_ns_capable() check for peer netns</title>
    <updated>2026-10-03T20:58:04.221529+00:00</updated>
    <content>msrc_CVE-2026-31692</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2026-31692"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2026:45114</id>
    <title>RHSA-2026:45114 — Red Hat Security Advisory: kernel security update</title>
    <updated>2026-10-03T20:58:04.221546+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>kernel: fs/notify: call exportfs_encode_fid with s_umount kernel: scsi: core: Wake up the error handler when final completions race against each other kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2026:45114"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2026:49213</id>
    <title>RHSA-2026:49213 — Red Hat Security Advisory: kernel-rt security update</title>
    <updated>2026-10-03T20:58:04.221575+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns kernel: netfilter: ctnetlink: ensure safe access to master conntrack kernel: fanotify: fix false positive on permission events kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2026:49213"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rlsa-2026:45114</id>
    <title>RLSA-2026:45114 — Important: kernel security update</title>
    <updated>2026-10-03T20:58:04.221597+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Rocky Linux:10: kernel</p>
<p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p>
<p>Security Fix(es):</p>
<p>* kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
* kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
* kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
* kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
* kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
* kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rlsa-2026:45114"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31692</id>
    <title>UBUNTU-CVE-2026-31692</title>
    <updated>2026-10-03T20:58:04.221622+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 234 more</p>
<p>In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net. Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31692"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1326</id>
    <title>WID-SEC-W-2026-1326 — Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen</title>
    <updated>2026-10-03T20:58:04.221962+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann eine Schwachstellen im Linux Kernel ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1326"/>
  </entry>
</feed>
