https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:23:46.135101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-46159 BELL-CVE-2026-46159 2026-10-03T01:23:46.448937+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0731 certfr-2026-avi-0731 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-03T01:23:46.449013+00:00 certfr-2026-avi-0731 https://cve.radiocsirt.org/vuln/euvd-2026-328698 EUVD-2026-328698 2026-10-03T01:23:46.449034+00:00 EUVD-2026-328698 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46159 fkie_cve-2026-46159 2026-10-03T01:23:46.449047+00:00

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak

btrfs_ioctl_space_info() has a TOCTOU race between two passes over the block group RAID type lists. The first pass counts entries to determine the allocation size, then the second pass fills the buffer. The groups_sem rwlock is released between passes, allowing concurrent block group removal to reduce the entry count.

When the second pass fills fewer entries than the first pass counted, copy_to_user() copies the full alloc_size bytes including trailing uninitialized kmalloc bytes to userspace.

Fix by copying only total_spaces entries (the actually-filled count from the second pass) instead of alloc_size bytes, and switch to kzalloc so any future copy size mismatch cannot leak heap data.

 https://cve.radiocsirt.org/vuln/ghsa-8m37-fqxx-cfwj GHSA-8m37-fqxx-cfwj 2026-10-03T01:23:46.449080+00:00

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak

btrfs_ioctl_space_info() has a TOCTOU race between two passes over the block group RAID type lists. The first pass counts entries to determine the allocation size, then the second pass fills the buffer. The groups_sem rwlock is released between passes, allowing concurrent block group removal to reduce the entry count.

When the second pass fills fewer entries than the first pass counted, copy_to_user() copies the full alloc_size bytes including trailing uninitialized kmalloc bytes to userspace.

Fix by copying only total_spaces entries (the actually-filled count from the second pass) instead of alloc_size bytes, and switch to kzalloc so any future copy size mismatch cannot leak heap data.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-46159 msrc_CVE-2026-46159 — btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak 2026-10-03T01:23:46.449101+00:00 msrc_CVE-2026-46159 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10954-1 openSUSE-SU-2026:10954-1 — kernel-devel-7.0.11-1.1 on GA media 2026-10-03T01:23:46.449118+00:00

kernel-devel-7.0.11-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22099-1 SUSE-SU-2026:22099-1 — Security update for the Linux Kernel 2026-10-03T01:23:46.449281+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-46159 UBUNTU-CVE-2026-46159 2026-10-03T01:23:46.449328+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 253 more

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak btrfs_ioctl_space_info() has a TOCTOU race between two passes over the block group RAID type lists. The first pass counts entries to determine the allocation size, then the second pass fills the buffer. The groups_sem rwlock is released between passes, allowing concurrent block group removal to reduce the entry count. When the second pass fills fewer entries than the first pass counted, copy_to_user() copies the full alloc_size bytes including trailing uninitialized kmalloc bytes to userspace. Fix by copying only total_spaces entries (the actually-filled count from the second pass) instead of alloc_size bytes, and switch to kzalloc so any future copy size mismatch cannot leak heap data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1700 WID-SEC-W-2026-1700 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T01:23:46.449786+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.