https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:27:23.437967+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:36541 ALSA-2026:36541 — Important: kernel security, bug fix, and enhancement update 2026-10-02T15:27:23.843950+00:00

Affected: AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)

Bug Fix(es) and Enhancement(s):

* CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-09448 bdu:2026-09448 2026-10-02T15:27:23.844138+00:00 bdu:2026-09448 https://cve.radiocsirt.org/vuln/bell-cve-2026-43074 BELL-CVE-2026-43074 2026-10-02T15:27:23.844159+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0807 certfr-2026-avi-0807 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-02T15:27:23.844180+00:00 certfr-2026-avi-0807 https://cve.radiocsirt.org/vuln/essa-2026:0165 ESSA-2026:0165 — Important: kernel security, bug fix, and enhancement update 2026-10-02T15:27:23.844197+00:00

Important: kernel security, bug fix, and enhancement update

 https://cve.radiocsirt.org/vuln/euvd-2026-347819 EUVD-2026-347819 2026-10-02T15:27:23.844223+00:00 EUVD-2026-347819 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43074 fkie_cve-2026-43074 2026-10-02T15:27:23.844235+00:00

In the Linux kernel, the following vulnerability has been resolved:

eventpoll: defer struct eventpoll free to RCU grace period

In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

 https://cve.radiocsirt.org/vuln/ghsa-4j6h-qqh4-vpw7 GHSA-4j6h-qqh4-vpw7 2026-10-02T15:27:23.844259+00:00

In the Linux kernel, the following vulnerability has been resolved:

eventpoll: defer struct eventpoll free to RCU grace period

In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

 https://cve.radiocsirt.org/vuln/rhsa-2026:36186 RHSA-2026:36186 — Red Hat Security Advisory: kernel security update 2026-10-02T15:27:23.844282+00:00

kernel: eventpoll: defer struct eventpoll free to RCU grace period kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF

 https://cve.radiocsirt.org/vuln/suse-su-2026:22433-1 SUSE-SU-2026:22433-1 — Security update for the Linux Kernel 2026-10-02T15:27:23.844304+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43074 UBUNTU-CVE-2026-43074 2026-10-02T15:27:23.844412+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 173 more

In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1385 WID-SEC-W-2026-1385 — Linux Kernel: Mehrere Schwachstellen 2026-10-02T15:27:23.844724+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder potentiell beliebigen Programmcode auszuführen.