<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-07T15:31:53.175493+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2022-07506</id>
    <title>bdu:2022-07506</title>
    <updated>2026-10-07T15:31:53.334539+00:00</updated>
    <content>bdu:2022-07506</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2022-07506"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2022-47519</id>
    <title>Withdrawn: BELL-CVE-2022-47519 — CVE-2022-47519 does not affect BellSoft software</title>
    <updated>2026-10-07T15:31:53.334579+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2022-47519"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2022-avi-1127</id>
    <title>certfr-2022-avi-1127 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de
Debian. Certaines d'entre elles permettent à un…</title>
    <updated>2026-10-07T15:31:53.334598+00:00</updated>
    <content>certfr-2022-avi-1127</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2022-avi-1127"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-231527</id>
    <title>EUVD-2026-231527</title>
    <updated>2026-10-07T15:31:53.334614+00:00</updated>
    <content>EUVD-2026-231527</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-231527"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-47519</id>
    <title>fkie_cve-2022-47519</title>
    <updated>2026-10-07T15:31:53.334625+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-47519"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-pvrf-2wf8-jrqv</id>
    <title>GHSA-pvrf-2wf8-jrqv</title>
    <updated>2026-10-07T15:31:53.334652+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-pvrf-2wf8-jrqv"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-47519</id>
    <title>gsd-2022-47519</title>
    <updated>2026-10-07T15:31:53.334668+00:00</updated>
    <content>gsd-2022-47519</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-47519"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2022-47519</id>
    <title>msrc_CVE-2022-47519 — An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in dri…</title>
    <updated>2026-10-07T15:31:53.334678+00:00</updated>
    <content>msrc_CVE-2022-47519</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2022-47519"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2022-2162</id>
    <title>OESA-2022-2162 — kernel security update</title>
    <updated>2026-10-07T15:31:53.334695+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:22.03-LTS: kernel</p>
<p>Security Fix(es):

A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.(CVE-2022-4095)

There are null-ptr-deref vulnerabilities in drivers/net/slip of linux that allow attacker to
crash linux kernel by simulating slip network card from user-space of linux.

------------------------------------------

[Root cause]

When a slip driver is detaching, the slip_close() will act to
cleanup necessary resources and sl-&amp;gt;tty is set to NULL in
slip_close(). Meanwhile, the packet we transmit is blocked,
sl_tx_timeout() will be called. Although slip_close() and
sl_tx_timeout() use sl-&amp;gt;lock to synchronize, we don`t judge
whether sl-&amp;gt;tty equals to NULL in sl_tx_timeout() and the
null pointer dereference bug will happen.

(Thread 1) | (Thread 2)
| slip_close()
| spin_lock_bh(&amp;amp;sl-&amp;gt;lock)
| ...
... | sl-&amp;gt;tty = NULL //(1)
sl_tx_timeout() | spin_unlock_bh(&amp;amp;sl-&amp;gt;lock)
spin_lock(&amp;amp;sl-&amp;gt;lock); |
... | ...
tty_chars_in_buffer(sl-&amp;gt;tty)|
if (tty-&amp;gt;ops-&amp;gt;..) //(2) |
... | synchronize_rcu()

We set NULL to sl-&amp;gt;tty in position (1) and dereference sl-&amp;gt;tty
in position (2).

------------------------------------------(CVE-2022-41858)

A flaw was found in the Linux kernel&amp;apos;s Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to…</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2022-2162"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47519</id>
    <title>UBUNTU-CVE-2022-47519</title>
    <updated>2026-10-07T15:31:53.334750+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge and 127 more</p>
<p>An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47519"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2361</id>
    <title>WID-SEC-W-2022-2361 — Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff</title>
    <updated>2026-10-07T15:31:53.334931+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2361"/>
  </entry>
</feed>
