https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:31:27.905089+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:45114 ALSA-2026:45114 — Important: kernel security update 2026-10-02T16:31:28.096113+00:00

Affected: AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

 https://cve.radiocsirt.org/vuln/bdu:2026-13930 bdu:2026-13930 2026-10-02T16:31:28.096253+00:00 bdu:2026-13930 https://cve.radiocsirt.org/vuln/bell-cve-2026-52973 BELL-CVE-2026-52973 2026-10-02T16:31:28.096279+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0926 certfr-2026-avi-0926 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-02T16:31:28.096300+00:00 certfr-2026-avi-0926 https://cve.radiocsirt.org/vuln/euvd-2026-363390 EUVD-2026-363390 2026-10-02T16:31:28.096355+00:00 EUVD-2026-363390 https://cve.radiocsirt.org/vuln/fkie_cve-2026-52973 fkie_cve-2026-52973 2026-10-02T16:31:28.096366+00:00

In the Linux kernel, the following vulnerability has been resolved:

futex: Drop CLONE_THREAD requirement for private default hash alloc

Currently need_futex_hash_allocate_default() depends on strict pthread semantics, abusing CLONE_THREAD. This breaks the non-concurrency assumptions when doing the mm->futex_ref pcpu allocations, leading to bugs[0] when sharing the mm in other ways; ie:

BUG: KASAN: slab-use-after-free in futex_hash_put

... where the +1 bias can end up on a percpu counter that mm->futex_ref no longer points at.

Loosen the check to cover any CLONE_VM clone, except vfork(). Excluding vfork keeps the existing paths untouched (no overhead), and we can't race in the first place: either the parent is suspended and the child runs alone, or mm->futex_ref is already allocated from an earlier CLONE_VM.

 https://cve.radiocsirt.org/vuln/ghsa-9qj4-wr4g-7m6f GHSA-9qj4-wr4g-7m6f 2026-10-02T16:31:28.096396+00:00

In the Linux kernel, the following vulnerability has been resolved:

futex: Drop CLONE_THREAD requirement for private default hash alloc

Currently need_futex_hash_allocate_default() depends on strict pthread semantics, abusing CLONE_THREAD. This breaks the non-concurrency assumptions when doing the mm->futex_ref pcpu allocations, leading to bugs[0] when sharing the mm in other ways; ie:

BUG: KASAN: slab-use-after-free in futex_hash_put

... where the +1 bias can end up on a percpu counter that mm->futex_ref no longer points at.

Loosen the check to cover any CLONE_VM clone, except vfork(). Excluding vfork keeps the existing paths untouched (no overhead), and we can't race in the first place: either the parent is suspended and the child runs alone, or mm->futex_ref is already allocated from an earlier CLONE_VM.

 https://cve.radiocsirt.org/vuln/rhsa-2026:45114 RHSA-2026:45114 — Red Hat Security Advisory: kernel security update 2026-10-02T16:31:28.096419+00:00

kernel: fs/notify: call exportfs_encode_fid with s_umount kernel: scsi: core: Wake up the error handler when final completions race against each other kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

 https://cve.radiocsirt.org/vuln/rhsa-2026:62640 RHSA-2026:62640 — Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update 2026-10-02T16:31:28.096446+00:00

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

 https://cve.radiocsirt.org/vuln/rlsa-2026:45114 RLSA-2026:45114 — Important: kernel security update 2026-10-02T16:31:28.096470+00:00

Affected: Rocky Linux:10: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-52973 UBUNTU-CVE-2026-52973 2026-10-02T16:31:28.096493+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 127 more

In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc Currently need_futex_hash_allocate_default() depends on strict pthread semantics, abusing CLONE_THREAD. This breaks the non-concurrency assumptions when doing the mm->futex_ref pcpu allocations, leading to bugs[0] when sharing the mm in other ways; ie: BUG: KASAN: slab-use-after-free in futex_hash_put ... where the +1 bias can end up on a percpu counter that mm->futex_ref no longer points at. Loosen the check to cover any CLONE_VM clone, except vfork(). Excluding vfork keeps the existing paths untouched (no overhead), and we can't race in the first place: either the parent is suspended and the child runs alone, or mm->futex_ref is already allocated from an earlier CLONE_VM.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2077 WID-SEC-W-2026-2077 — Linux Kernel: Mehrere Schwachstellen 2026-10-02T16:31:28.096668+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen und weitere, nicht näher spezifizierte Auswirkungen zu erzielen.