https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T07:06:28.137282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-13863 bdu:2026-13863 2026-10-10T07:06:28.268439+00:00 bdu:2026-13863 https://cve.radiocsirt.org/vuln/bell-cve-2026-53343 BELL-CVE-2026-53343 2026-10-10T07:06:28.268487+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0862 certfr-2026-avi-0862 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-10T07:06:28.268518+00:00 certfr-2026-avi-0862 https://cve.radiocsirt.org/vuln/euvd-2026-331665 EUVD-2026-331665 2026-10-10T07:06:28.268536+00:00 EUVD-2026-331665 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53343 fkie_cve-2026-53343 2026-10-10T07:06:28.268547+00:00

In the Linux kernel, the following vulnerability has been resolved:

ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow

Commit 44e9a3bb76e5 ("ARM: 9430/1: entry: Do a dummy read from VMAP shadow") added a dummy read from the KASAN VMAP stack shadow in __switch_to(). The read uses ldr, but the KASAN shadow address is byte-granular and is not guaranteed to be word aligned.

ARMv5 faults unaligned word loads. With CONFIG_KASAN_VMALLOC and CONFIG_VMAP_STACK enabled, ARM926/VersatilePB crashes in __switch_to() with an alignment exception before reaching init.

Use ldrb for the dummy shadow access. The code only needs to fault in the shadow mapping if the stack shadow is missing, so a byte load is sufficient and matches the granularity of KASAN shadow memory.

 https://cve.radiocsirt.org/vuln/ghsa-4f2p-2mpv-gjwq GHSA-4f2p-2mpv-gjwq 2026-10-10T07:06:28.268580+00:00

In the Linux kernel, the following vulnerability has been resolved:

ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow

Commit 44e9a3bb76e5 ("ARM: 9430/1: entry: Do a dummy read from VMAP shadow") added a dummy read from the KASAN VMAP stack shadow in __switch_to(). The read uses ldr, but the KASAN shadow address is byte-granular and is not guaranteed to be word aligned.

ARMv5 faults unaligned word loads. With CONFIG_KASAN_VMALLOC and CONFIG_VMAP_STACK enabled, ARM926/VersatilePB crashes in __switch_to() with an alignment exception before reaching init.

Use ldrb for the dummy shadow access. The code only needs to fault in the shadow mapping if the stack shadow is missing, so a byte load is sufficient and matches the granularity of KASAN shadow memory.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-53343 msrc_CVE-2026-53343 — ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow 2026-10-10T07:06:28.268602+00:00 msrc_CVE-2026-53343 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-53343 UBUNTU-CVE-2026-53343 2026-10-10T07:06:28.268619+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 163 more

In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commit 44e9a3bb76e5 ("ARM: 9430/1: entry: Do a dummy read from VMAP shadow") added a dummy read from the KASAN VMAP stack shadow in __switch_to(). The read uses ldr, but the KASAN shadow address is byte-granular and is not guaranteed to be word aligned. ARMv5 faults unaligned word loads. With CONFIG_KASAN_VMALLOC and CONFIG_VMAP_STACK enabled, ARM926/VersatilePB crashes in __switch_to() with an alignment exception before reaching init. Use ldrb for the dummy shadow access. The code only needs to fault in the shadow mapping if the stack shadow is missing, so a byte load is sufficient and matches the granularity of KASAN shadow memory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2175 WID-SEC-W-2026-2175 — Linux Kernel: Mehrere Schwachstellen 2026-10-10T07:06:28.268844+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise das Auslösen eines Denial-of-Service-Zustands, die Umgehung von Sicherheitsmaßnahmen oder das Verursachen von Speicherbeschädigungen.