https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:06:01.022998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-80722 BELL-CVE-2026-80722 2026-10-04T04:06:01.083781+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1163 certfr-2026-avi-1163 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-04T04:06:01.083905+00:00 certfr-2026-avi-1163 https://cve.radiocsirt.org/vuln/euvd-2026-361591 EUVD-2026-361591 2026-10-04T04:06:01.083953+00:00 EUVD-2026-361591 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80722 fkie_cve-2026-80722 2026-10-04T04:06:01.083973+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: validate individual TWT params before driver setup

ieee80211_process_rx_twt_action() only partially validates a received S1G TWT setup frame before queueing it.

An individual agreement can therefore reach ieee80211_s1g_rx_twt_setup() with twt->length too short for the full struct ieee80211_twt_params.

The individual path passes twt to drv_add_twt_setup(). Both the tracepoint and the driver callback consume the complete parameters block, not merely req_type. Do not pass a short individual agreement to the driver. Broadcast agreements remain unchanged because they are rejected locally after accessing only req_type.

[edit commit message to not overclaim lack of validation nor understate driver impact]

 https://cve.radiocsirt.org/vuln/ghsa-h7fr-f2m3-rhpf GHSA-h7fr-f2m3-rhpf 2026-10-04T04:06:01.084033+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: validate individual TWT params before driver setup

ieee80211_process_rx_twt_action() only partially validates a received S1G TWT setup frame before queueing it.

An individual agreement can therefore reach ieee80211_s1g_rx_twt_setup() with twt->length too short for the full struct ieee80211_twt_params.

The individual path passes twt to drv_add_twt_setup(). Both the tracepoint and the driver callback consume the complete parameters block, not merely req_type. Do not pass a short individual agreement to the driver. Broadcast agreements remain unchanged because they are rejected locally after accessing only req_type.

[edit commit message to not overclaim lack of validation nor understate driver impact]

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-80722 msrc_CVE-2026-80722 — wifi: mac80211: validate individual TWT params before driver setup 2026-10-04T04:06:01.084086+00:00 msrc_CVE-2026-80722 https://cve.radiocsirt.org/vuln/suse-su-2026:4347-1 SUSE-SU-2026:4347-1 — Security update for the Linux Kernel 2026-10-04T04:06:01.084117+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80722 UBUNTU-CVE-2026-80722 2026-10-04T04:06:01.084266+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 193 more

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action() only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach ieee80211_s1g_rx_twt_setup() with twt->length too short for the full struct ieee80211_twt_params. The individual path passes twt to drv_add_twt_setup(). Both the tracepoint and the driver callback consume the complete parameters block, not merely req_type. Do not pass a short individual agreement to the driver. Broadcast agreements remain unchanged because they are rejected locally after accessing only req_type. [edit commit message to not overclaim lack of validation nor understate driver impact]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3075 WID-SEC-W-2026-3075 — Linux Kernel: Mehrere Schwachstellen 2026-10-04T04:06:01.084802+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise Speicherbeschädigungen, die Offenlegung oder Manipulation von Daten sowie Denial-of-Service-Zustände.