https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:55:18.857365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-80676 BELL-CVE-2026-80676 2026-10-04T00:55:18.866074+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/euvd-2026-361047 EUVD-2026-361047 2026-10-04T00:55:18.866128+00:00 EUVD-2026-361047 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80676 fkie_cve-2026-80676 2026-10-04T00:55:18.866145+00:00

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: use generic driver_override infrastructure

When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF.

Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally.

Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

 https://cve.radiocsirt.org/vuln/ghsa-pvqm-w959-q2j3 GHSA-pvqm-w959-q2j3 2026-10-04T00:55:18.866177+00:00

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: use generic driver_override infrastructure

When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF.

Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally.

Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-80676 msrc_CVE-2026-80676 — Drivers: hv: vmbus: use generic driver_override infrastructure 2026-10-04T00:55:18.866198+00:00 msrc_CVE-2026-80676 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80676 UBUNTU-CVE-2026-80676 2026-10-04T00:55:18.866215+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 219 more

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3075 WID-SEC-W-2026-3075 — Linux Kernel: Mehrere Schwachstellen 2026-10-04T00:55:18.866642+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise Speicherbeschädigungen, die Offenlegung oder Manipulation von Daten sowie Denial-of-Service-Zustände.