<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 19:39:18 +0000</lastBuildDate>
    <item>
      <title>ALSA-2022:1988 — Important: kernel security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2022:1988</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 10 more&lt;/p&gt;
&lt;p&gt;The kernel packages contain the Linux kernel, the core of any Linux operating system.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)&lt;/p&gt;
&lt;p&gt;* kernel: avoid cyclic entity chains due to malformed USB descriptors (CVE-2020-0404)&lt;/p&gt;
&lt;p&gt;* kernel: speculation on incompletely validated data on IBM Power9 (CVE-2020-4788)&lt;/p&gt;
&lt;p&gt;* kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c (CVE-2020-13974)&lt;/p&gt;
&lt;p&gt;* kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free (CVE-2021-0941)&lt;/p&gt;
&lt;p&gt;* kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() (CVE-2021-3612)&lt;/p&gt;
&lt;p&gt;* kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts (CVE-2021-3669)&lt;/p&gt;
&lt;p&gt;* kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743)&lt;/p&gt;
&lt;p&gt;* kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744)&lt;/p&gt;
&lt;p&gt;* kernel: possible use-after-free in bluetooth module (CVE-2021-3752)&lt;/p&gt;
&lt;p&gt;* kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks (CVE-2021-3759)&lt;/p&gt;
&lt;p&gt;* kernel: DoS in ccp_run_aes_gcm_cmd() function (CVE-2021-3764)&lt;/p&gt;
&lt;p&gt;* kernel: sctp: Invalid chunks may be used to remotely remove existing associations (CVE-2021-3772)&lt;/p&gt;
&lt;p&gt;* kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients (CVE-2021-3773)&lt;/p&gt;
&lt;p&gt;* kernel: possible leak or coruption of data residing on hugetlbfs (CVE-2021-4002)&lt;/p&gt;
&lt;p&gt;* kernel: security regressi…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 10 more&lt;/p&gt;
&lt;p&gt;The kernel packages contain the Linux kernel, the core of any Linux operating system.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)&lt;/p&gt;
&lt;p&gt;* kernel: avoid cyclic entity chains due to malformed USB descriptors (CVE-2020-0404)&lt;/p&gt;
&lt;p&gt;* kernel: speculation on incompletely validated data on IBM Power9 (CVE-2020-4788)&lt;/p&gt;
&lt;p&gt;* kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c (CVE-2020-13974)&lt;/p&gt;
&lt;p&gt;* kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free (CVE-2021-0941)&lt;/p&gt;
&lt;p&gt;* kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() (CVE-2021-3612)&lt;/p&gt;
&lt;p&gt;* kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts (CVE-2021-3669)&lt;/p&gt;
&lt;p&gt;* kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743)&lt;/p&gt;
&lt;p&gt;* kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744)&lt;/p&gt;
&lt;p&gt;* kernel: possible use-after-free in bluetooth module (CVE-2021-3752)&lt;/p&gt;
&lt;p&gt;* kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks (CVE-2021-3759)&lt;/p&gt;
&lt;p&gt;* kernel: DoS in ccp_run_aes_gcm_cmd() function (CVE-2021-3764)&lt;/p&gt;
&lt;p&gt;* kernel: sctp: Invalid chunks may be used to remotely remove existing associations (CVE-2021-3772)&lt;/p&gt;
&lt;p&gt;* kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients (CVE-2021-3773)&lt;/p&gt;
&lt;p&gt;* kernel: possible leak or coruption of data residing on hugetlbfs (CVE-2021-4002)&lt;/p&gt;
&lt;p&gt;* kernel: security regressi…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2022:1988</guid>
    </item>
    <item>
      <title>bdu:2020-05784</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2020-05784</link>
      <description>bdu:2020-05784</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2020-05784</guid>
    </item>
    <item>
      <title>certfr-2020-avi-554 — De multiples vulnérabilités ont été découvertes dans Google Android.
Certaines d'entre elles permettent à un attaquant…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2020-avi-554</link>
      <description>certfr-2020-avi-554</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2020-avi-554</guid>
    </item>
    <item>
      <title>cnvd-2020-54064</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2020-54064</link>
      <description>cnvd-2020-54064</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2020-54064</guid>
    </item>
    <item>
      <title>EUVD-2026-34577</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-34577</link>
      <description>EUVD-2026-34577</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-34577</guid>
    </item>
    <item>
      <title>fkie_cve-2020-0404</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2020-0404</link>
      <description>&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2020-0404</guid>
    </item>
    <item>
      <title>GHSA-mrvf-vwcf-3ghc</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-mrvf-vwcf-3ghc</link>
      <description>&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-mrvf-vwcf-3ghc</guid>
    </item>
    <item>
      <title>gsd-2020-0404</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2020-0404</link>
      <description>gsd-2020-0404</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2020-0404</guid>
    </item>
    <item>
      <title>openSUSE-SU-2020:1586-1 — Security update for the Linux Kernel</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2020:1586-1</link>
      <description>&lt;p&gt;Security update for the Linux Kernel&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for the Linux Kernel&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2020:1586-1</guid>
    </item>
    <item>
      <title>RHSA-2022:1975 — Red Hat Security Advisory: kernel-rt security and bug fix update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2022:1975</link>
      <description>&lt;p&gt;kernel: avoid cyclic entity chains due to malformed USB descriptors kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c kernel: use-after-free in nouveau kernel module kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() kernel: possible use-after-free in bluetooth module kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks kernel: DoS in ccp_run_aes_gcm_cmd() function kernel: sctp: Invalid chunks may be used to remotely remove existing associations kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients kernel: stack information leak in infiniband RDMA kernel: possible leak or coruption of data residing on hugetlbfs kernel: security regression for CVE-2018-13405 kernel: fget: check that the fd still exists after getting a ref to it kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io kernel: Buffer overwrite in decode_nfs_fh function kernel: cgroup: Use open-time creds and namespace for migration perm checks kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;kernel: avoid cyclic entity chains due to malformed USB descriptors kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c kernel: use-after-free in nouveau kernel module kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() kernel: possible use-after-free in bluetooth module kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks kernel: DoS in ccp_run_aes_gcm_cmd() function kernel: sctp: Invalid chunks may be used to remotely remove existing associations kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients kernel: stack information leak in infiniband RDMA kernel: possible leak or coruption of data residing on hugetlbfs kernel: security regression for CVE-2018-13405 kernel: fget: check that the fd still exists after getting a ref to it kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io kernel: Buffer overwrite in decode_nfs_fh function kernel: cgroup: Use open-time creds and namespace for migration perm checks kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2022:1975</guid>
    </item>
    <item>
      <title>SUSE-SU-2020:2879-1 — Security update for the Linux Kernel</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2020:2879-1</link>
      <description>&lt;p&gt;Security update for the Linux Kernel&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for the Linux Kernel&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2020:2879-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2020-0404</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-0404</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 42 more&lt;/p&gt;
&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 42 more&lt;/p&gt;
&lt;p&gt;In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-0404</guid>
    </item>
  </channel>
</rss>
