https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:25:43.191510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:70459 ALSA-2026:70459 — Important: kernel security, bug fix, and enhancement update 2026-10-03T05:25:43.348348+00:00

Affected: AlmaLinux:9: kernel, AlmaLinux:9: kernel-64k, AlmaLinux:9: kernel-64k-core, AlmaLinux:9: kernel-64k-debug, AlmaLinux:9: kernel-64k-debug-core, AlmaLinux:9: kernel-64k-debug-devel, AlmaLinux:9: kernel-64k-debug-devel-matched, AlmaLinux:9: kernel-64k-debug-modules, AlmaLinux:9: kernel-64k-debug-modules-core, AlmaLinux:9: kernel-64k-debug-modules-extra and 64 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

* [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8…

 https://cve.radiocsirt.org/vuln/bell-cve-2026-45959 BELL-CVE-2026-45959 2026-10-03T05:25:43.348500+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1230 certfr-2026-avi-1230 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un… 2026-10-03T05:25:43.348525+00:00 certfr-2026-avi-1230 https://cve.radiocsirt.org/vuln/euvd-2026-347972 EUVD-2026-347972 2026-10-03T05:25:43.348543+00:00 EUVD-2026-347972 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45959 fkie_cve-2026-45959 2026-10-03T05:25:43.348554+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree

Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the `__cleanup(kfree)` attribute will make the address of the local variable, rather than the address returned by kmalloc, passed to kfree directly and lead to a crash due to invalid deallocation of stack address. According to other places in the repo, the correct usage should be `__free(kfree)`. The code coincidentally compiled because the parameter type `void *` of kfree is compatible with the desired type `struct { ... } **`.

 https://cve.radiocsirt.org/vuln/ghsa-6j4x-6364-q9p3 GHSA-6j4x-6364-q9p3 2026-10-03T05:25:43.348581+00:00

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree

Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the `__cleanup(kfree)` attribute will make the address of the local variable, rather than the address returned by kmalloc, passed to kfree directly and lead to a crash due to invalid deallocation of stack address. According to other places in the repo, the correct usage should be `__free(kfree)`. The code coincidentally compiled because the parameter type `void *` of kfree is compatible with the desired type `struct { ... } **`.

 https://cve.radiocsirt.org/vuln/rhsa-2026:70459 RHSA-2026:70459 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T05:25:43.348600+00:00

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree kernel: dm cache policy smq: fix missing locks in invalidating cache blocks kernel: keys: Pin request_key_auth payload in instantiate paths kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update kernel: Linux kernel: libceph null pointer dereference leads to denial of service kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries()

 https://cve.radiocsirt.org/vuln/rhsa-2026:70498 RHSA-2026:70498 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-03T05:25:43.348642+00:00

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree kernel: dm cache policy smq: fix missing locks in invalidating cache blocks kernel: keys: Pin request_key_auth payload in instantiate paths kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries()

 https://cve.radiocsirt.org/vuln/rlsa-2026:70459 RLSA-2026:70459 — Important: kernel security, bug fix, and enhancement update 2026-10-03T05:25:43.348674+00:00

Affected: Rocky Linux:9: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)

* kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)

* kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)

* kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

* kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

* kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

* kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157)

* kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

* kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)

* kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)

* kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391)

* kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072)

* kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

* [Intel 9.8 FEAT] ice: Driver Update [rhel-9.8.z] (JIRA:Rocky Linux-213003)

* Rocky Linux 9.8: Multiuser Kerberized DF…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45959 UBUNTU-CVE-2026-45959 2026-10-03T05:25:43.348717+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 103 more

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the `__cleanup(kfree)` attribute will make the address of the local variable, rather than the address returned by kmalloc, passed to kfree directly and lead to a crash due to invalid deallocation of stack address. According to other places in the repo, the correct usage should be `__free(kfree)`. The code coincidentally compiled because the parameter type `void *` of kfree is compatible with the desired type `struct { ... } **`.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1700 WID-SEC-W-2026-1700 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T05:25:43.348867+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.