https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:40:25.511254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-13856 bdu:2026-13856 2026-10-15T21:40:25.522693+00:00 bdu:2026-13856 https://cve.radiocsirt.org/vuln/bell-cve-2026-53363 BELL-CVE-2026-53363 2026-10-15T21:40:25.522731+00:00

Affected: Alpaquita:stream: linux-lts

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1162 certfr-2026-avi-1162 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-15T21:40:25.522758+00:00 certfr-2026-avi-1162 https://cve.radiocsirt.org/vuln/euvd-2026-348240 EUVD-2026-348240 2026-10-15T21:40:25.522775+00:00 EUVD-2026-348240 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53363 fkie_cve-2026-53363 2026-10-15T21:40:25.522785+00:00

In the Linux kernel, the following vulnerability has been resolved:

xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

iptfs_consume_frags() transfers paged fragments from one socket buffer to another but fails to propagate the SKBFL_SHARED_FRAG flag. This is the same class of bug that was fixed in skb_try_coalesce() for CVE-2026-46300: when fragments backed by read-only page-cache pages are merged, the marker indicating their shared nature must be preserved so that ESP can decide correctly whether in-place encryption is safe.

Apply the same two-line fix used in skb_try_coalesce() to iptfs_consume_frags().

 https://cve.radiocsirt.org/vuln/ghsa-7xf9-r6gc-x4cm GHSA-7xf9-r6gc-x4cm 2026-10-15T21:40:25.522812+00:00

In the Linux kernel, the following vulnerability has been resolved:

xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

iptfs_consume_frags() transfers paged fragments from one socket buffer to another but fails to propagate the SKBFL_SHARED_FRAG flag. This is the same class of bug that was fixed in skb_try_coalesce() for CVE-2026-46300: when fragments backed by read-only page-cache pages are merged, the marker indicating their shared nature must be preserved so that ESP can decide correctly whether in-place encryption is safe.

Apply the same two-line fix used in skb_try_coalesce() to iptfs_consume_frags().

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-53363 UBUNTU-CVE-2026-53363 2026-10-15T21:40:25.522831+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 119 more

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() iptfs_consume_frags() transfers paged fragments from one socket buffer to another but fails to propagate the SKBFL_SHARED_FRAG flag. This is the same class of bug that was fixed in skb_try_coalesce() for CVE-2026-46300: when fragments backed by read-only page-cache pages are merged, the marker indicating their shared nature must be preserved so that ESP can decide correctly whether in-place encryption is safe. Apply the same two-line fix used in skb_try_coalesce() to iptfs_consume_frags().

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2286 WID-SEC-W-2026-2286 — Linux Kernel (xfrm: iptfs): Schwachstelle ermöglicht DoS und Manipulation von Daten 2026-10-15T21:40:25.522968+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um möglicherweise einen Denial-of-Service-Zustand auszulösen oder Daten zu manipulieren.