https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:49:38.772587+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:71016 ALSA-2026:71016 — Important: kernel-rt security, bug fix, and enhancement update 2026-10-03T05:49:39.061888+00:00

Affected: AlmaLinux:8: kernel-rt, AlmaLinux:8: kernel-rt-core, AlmaLinux:8: kernel-rt-debug, AlmaLinux:8: kernel-rt-debug-core, AlmaLinux:8: kernel-rt-debug-devel, AlmaLinux:8: kernel-rt-debug-modules, AlmaLinux:8: kernel-rt-debug-modules-extra, AlmaLinux:8: kernel-rt-devel, AlmaLinux:8: kernel-rt-modules, AlmaLinux:8: kernel-rt-modules-extra

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

Bug Fix(es) and Enhancement(s):

* sctp: prevent peer transport count overflow [almalinux-8.10.z] (JIRA:AlmaLinux-216297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-14927 bdu:2026-14927 2026-10-03T05:49:39.061985+00:00 bdu:2026-14927 https://cve.radiocsirt.org/vuln/bell-cve-2026-80844 BELL-CVE-2026-80844 2026-10-03T05:49:39.062004+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1163 certfr-2026-avi-1163 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-03T05:49:39.062028+00:00 certfr-2026-avi-1163 https://cve.radiocsirt.org/vuln/euvd-2026-363866 EUVD-2026-363866 2026-10-03T05:49:39.062044+00:00 EUVD-2026-363866 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80844 fkie_cve-2026-80844 2026-10-03T05:49:39.062055+00:00

In the Linux kernel, the following vulnerability has been resolved:

xfrm: ah6: validate routing header segments_left

AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number of addresses described by the routing header's hdrlen field.

That assumption does not hold for raw IPv6 HDRINCL packets. A packet with hdrlen equal to 2 describes one address, but can carry an arbitrary segments_left value. With segments_left equal to 255, the function moves its address pointer 4,064 bytes backwards and passes a 4,064-byte length to memmove(), resulting in an out-of-bounds access.

Validate the invariant locally before modifying the routing header or performing any address-pointer arithmetic, and propagate malformed-header errors to the existing AH6 input and output error paths.

 https://cve.radiocsirt.org/vuln/ghsa-jv4j-682x-84w7 GHSA-jv4j-682x-84w7 2026-10-03T05:49:39.062085+00:00

In the Linux kernel, the following vulnerability has been resolved:

xfrm: ah6: validate routing header segments_left

AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number of addresses described by the routing header's hdrlen field.

That assumption does not hold for raw IPv6 HDRINCL packets. A packet with hdrlen equal to 2 describes one address, but can carry an arbitrary segments_left value. With segments_left equal to 255, the function moves its address pointer 4,064 bytes backwards and passes a 4,064-byte length to memmove(), resulting in an out-of-bounds access.

Validate the invariant locally before modifying the routing header or performing any address-pointer arithmetic, and propagate malformed-header errors to the existing AH6 input and output error paths.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-80844 msrc_CVE-2026-80844 — xfrm: ah6: validate routing header segments_left 2026-10-03T05:49:39.062107+00:00 msrc_CVE-2026-80844 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11773-1 openSUSE-SU-2026:11773-1 — kernel-devel-7.2.5-1.1 on GA media 2026-10-03T05:49:39.062123+00:00

kernel-devel-7.2.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:71016 RHSA-2026:71016 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update 2026-10-03T05:49:39.062198+00:00

kernel: drm/amdgpu: Fix use-after-free race in VM acquire kernel: mac802154: llsec: add skb_cow_data() before in-place crypto kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control kernel: xfrm: ah6: validate routing header segments_left kernel: net: tun: bound receive headroom kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

 https://cve.radiocsirt.org/vuln/rlsa-2026:71232 RLSA-2026:71232 — Important: kernel security, bug fix, and enhancement update 2026-10-03T05:49:39.062224+00:00

Affected: Rocky Linux:9: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007)

* kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005)

* kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)

* kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802)

* kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053)

* kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383)

* kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

* kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

* kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201)

* kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261)

* kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844)

* kernel: net: tun: bound receive headroom (CVE-2026-81000)

* kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

Bug Fix(es) and Enhancement(s):

* sctp: prevent peer transport count overflow [rhel-9.8.z] (JIRA:Rocky Linux-216251)

* netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:Rocky Linux-236634)

For more details about the security issue(s), including the impact, a CVSS score, acknowl…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80844 UBUNTU-CVE-2026-80844 2026-10-03T05:49:39.062269+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number of addresses described by the routing header's hdrlen field. That assumption does not hold for raw IPv6 HDRINCL packets. A packet with hdrlen equal to 2 describes one address, but can carry an arbitrary segments_left value. With segments_left equal to 255, the function moves its address pointer 4,064 bytes backwards and passes a 4,064-byte length to memmove(), resulting in an out-of-bounds access. Validate the invariant locally before modifying the routing header or performing any address-pointer arithmetic, and propagate malformed-header errors to the existing AH6 input and output error paths.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3211 WID-SEC-W-2026-3211 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T05:49:39.062589+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um Speicherfehler und Kernel-Abstürze beziehungsweise Denial-of-Service-Zustände auszulösen, Speicher außerhalb vorgesehener Grenzen auszulesen sowie in einzelnen Fällen weitere Sicherheitsauswirkungen zu verursachen.