https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:34:36.492277+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-90023 BELL-CVE-2026-90023 2026-10-03T13:34:36.625344+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/euvd-2026-369264 EUVD-2026-369264 2026-10-03T13:34:36.625398+00:00 EUVD-2026-369264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90023 fkie_cve-2026-90023 2026-10-03T13:34:36.625413+00:00

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()

Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n < 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.

 https://cve.radiocsirt.org/vuln/ghsa-4pqp-h39m-gcw4 GHSA-4pqp-h39m-gcw4 2026-10-03T13:34:36.625446+00:00

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()

Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n < 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-90023 msrc_CVE-2026-90023 — usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() 2026-10-03T13:34:36.625493+00:00 msrc_CVE-2026-90023 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11880-1 openSUSE-SU-2026:11880-1 — kernel-devel-7.2.7-1.1 on GA media 2026-10-03T13:34:36.625513+00:00

kernel-devel-7.2.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90023 UBUNTU-CVE-2026-90023 2026-10-03T13:34:36.626121+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.0 and 239 more

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n < 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3438 WID-SEC-W-2026-3438 — Linux Kernel: Mehrere Schwachstellen 2026-10-03T13:34:36.626458+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service zu verursachen oder eine nicht näher spezifizierte Auswirkung zu erzielen.