https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:31:37.295335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:45115 ALSA-2026:45115 — Important: kernel security update 2026-10-03T19:31:37.979071+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: xfrm single-frag length not properly limited * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

 https://cve.radiocsirt.org/vuln/bdu:2026-13941 bdu:2026-13941 2026-10-03T19:31:37.979187+00:00 bdu:2026-13941 https://cve.radiocsirt.org/vuln/bell-cve-2026-52993 BELL-CVE-2026-52993 2026-10-03T19:31:37.979205+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0862 certfr-2026-avi-0862 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-03T19:31:37.979227+00:00 certfr-2026-avi-0862 https://cve.radiocsirt.org/vuln/euvd-2026-348124 EUVD-2026-348124 2026-10-03T19:31:37.979244+00:00 EUVD-2026-348124 https://cve.radiocsirt.org/vuln/fkie_cve-2026-52993 fkie_cve-2026-52993 2026-10-03T19:31:37.979256+00:00

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix double-free in tipc_buf_append()

tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer.

If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free.

Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations.

 https://cve.radiocsirt.org/vuln/ghsa-m86q-cgj9-94c8 GHSA-m86q-cgj9-94c8 2026-10-03T19:31:37.979285+00:00

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix double-free in tipc_buf_append()

tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer.

If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free.

Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-52993 msrc_CVE-2026-52993 — tipc: fix double-free in tipc_buf_append() 2026-10-03T19:31:37.979305+00:00 msrc_CVE-2026-52993 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21388-1 openSUSE-SU-2026:21388-1 — Security update for the Linux Kernel 2026-10-03T19:31:37.979322+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2026:45116 RHSA-2026:45116 — Red Hat Security Advisory: kernel-rt security update 2026-10-03T19:31:37.979537+00:00

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O kernel: tipc: fix double-free in tipc_buf_append() kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

 https://cve.radiocsirt.org/vuln/rlsa-2026:45115 RLSA-2026:45115 — Important: kernel security update 2026-10-03T19:31:37.979560+00:00

Affected: Rocky Linux:8: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

* kernel: xfrm single-frag length not properly limited

* kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

 https://cve.radiocsirt.org/vuln/suse-su-2026:22742-1 SUSE-SU-2026:22742-1 — Security update for the Linux Kernel 2026-10-03T19:31:37.979585+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-52993 UBUNTU-CVE-2026-52993 2026-10-03T19:31:37.979739+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 246 more

In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer. If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free. Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2077 WID-SEC-W-2026-2077 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T19:31:37.980011+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen und weitere, nicht näher spezifizierte Auswirkungen zu erzielen.