https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:36:27.451029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02562 bdu:2020-02562 2026-10-02T15:36:27.837711+00:00 bdu:2020-02562 https://cve.radiocsirt.org/vuln/certfr-2019-avi-279 certfr-2019-avi-279 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at… 2026-10-02T15:36:27.837795+00:00 certfr-2019-avi-279 https://cve.radiocsirt.org/vuln/cnvd-2019-26831 cnvd-2019-26831 2026-10-02T15:36:27.837859+00:00 cnvd-2019-26831 https://cve.radiocsirt.org/vuln/euvd-2026-63088 EUVD-2026-63088 2026-10-02T15:36:27.837872+00:00 EUVD-2026-63088 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7191 fkie_cve-2018-7191 2026-10-02T15:36:27.837883+00:00

In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.

 https://cve.radiocsirt.org/vuln/ghsa-p54q-624c-fr42 GHSA-p54q-624c-fr42 2026-10-02T15:36:27.837913+00:00

In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.

 https://cve.radiocsirt.org/vuln/gsd-2018-7191 gsd-2018-7191 2026-10-02T15:36:27.837929+00:00 gsd-2018-7191 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1479-1 openSUSE-SU-2019:1479-1 — Security update for the Linux Kernel 2026-10-02T15:36:27.837940+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/rhsa-2020:1070 RHSA-2020:1070 — Red Hat Security Advisory: kernel-rt security and bug fix update 2026-10-02T15:36:27.837965+00:00

kernel: out of bound read in DVB connexant driver. kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission kernel: denial of service via ioctl call in network tun handling kernel: oob memory read in hso_probe in drivers/net/usb/hso.c kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS kernel: perf_event_open() and execve() race in setuid programs allows a data leak kernel: brcmfmac frame validation bypass kernel: null-pointer dereference in hci_uart_set_flow_control Kernel: net: weak IP ID generation leads to remote device tracking Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR kernel: ASLR bypass for setuid binaries due to late install_exec_creds() kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service kernel: use-after-free in arch/x86/lib/insn-eval.c kernel: integer overflow and OOB read in drivers/block/floppy.c kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS kernel: Null pointer dereference in the sound/usb/line6/pcm.c kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service kernel: buffer-overflow hardening in WiFi beacon validation code.

 https://cve.radiocsirt.org/vuln/suse-su-2019:1527-1 SUSE-SU-2019:1527-1 — Security update for the Linux Kernel 2026-10-02T15:36:27.838015+00:00

Security update for the Linux Kernel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7191 UBUNTU-CVE-2018-7191 2026-10-02T15:36:27.838038+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure and 56 more

In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.