https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:30:42 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:9580 <p><strong>Affected:</strong> AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>Security Fix(es):</p> <p>* kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919) * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>Security Fix(es):</p> <p>* kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919) * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:9580 https://cve.radiocsirt.org/vuln/bdu:2025-15032 bdu:2025-15032 https://cve.radiocsirt.org/vuln/bdu:2025-15032 https://cve.radiocsirt.org/vuln/bell-cve-2024-53064 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-53064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0047 certfr-2025-avi-0047 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0047 https://cve.radiocsirt.org/vuln/cnvd-2024-46391 cnvd-2024-46391 https://cve.radiocsirt.org/vuln/cnvd-2024-46391 https://cve.radiocsirt.org/vuln/euvd-2026-313592 EUVD-2026-313592 https://cve.radiocsirt.org/vuln/euvd-2026-313592 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53064 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>idpf: fix idpf_vc_core_init error path</p> <p>In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.</p> <p>In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>idpf: fix idpf_vc_core_init error path</p> <p>In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.</p> <p>In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53064 https://cve.radiocsirt.org/vuln/ghsa-87vp-wcxm-f9g2 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>idpf: fix idpf_vc_core_init error path</p> <p>In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.</p> <p>In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>idpf: fix idpf_vc_core_init error path</p> <p>In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.</p> <p>In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> https://cve.radiocsirt.org/vuln/ghsa-87vp-wcxm-f9g2 https://cve.radiocsirt.org/vuln/rhsa-2025:9580 <p>kernel: cifs: fix double free race when mount fails in cifs_get_root() kernel: Kernel: Denial of Service via memory leak in SMB client kernel: security/keys: fix slab-out-of-bounds in key_task_permission kernel: idpf: fix idpf_vc_core_init error path kernel: ndisc: use RCU protection in ndisc_alloc_skb() kernel: idpf: check error for register_netdev() on init kernel: idpf: fix null-ptr-deref in idpf_features_check</p> <p>kernel: cifs: fix double free race when mount fails in cifs_get_root() kernel: Kernel: Denial of Service via memory leak in SMB client kernel: security/keys: fix slab-out-of-bounds in key_task_permission kernel: idpf: fix idpf_vc_core_init error path kernel: ndisc: use RCU protection in ndisc_alloc_skb() kernel: idpf: check error for register_netdev() on init kernel: idpf: fix null-ptr-deref in idpf_features_check</p> https://cve.radiocsirt.org/vuln/rhsa-2025:9580 https://cve.radiocsirt.org/vuln/rhsa-2025:9581 <p>kernel: cifs: fix double free race when mount fails in cifs_get_root() kernel: Kernel: Denial of Service via memory leak in SMB client kernel: security/keys: fix slab-out-of-bounds in key_task_permission kernel: idpf: fix idpf_vc_core_init error path kernel: ndisc: use RCU protection in ndisc_alloc_skb() kernel: idpf: fix null-ptr-deref in idpf_features_check</p> <p>kernel: cifs: fix double free race when mount fails in cifs_get_root() kernel: Kernel: Denial of Service via memory leak in SMB client kernel: security/keys: fix slab-out-of-bounds in key_task_permission kernel: idpf: fix idpf_vc_core_init error path kernel: ndisc: use RCU protection in ndisc_alloc_skb() kernel: idpf: fix null-ptr-deref in idpf_features_check</p> https://cve.radiocsirt.org/vuln/rhsa-2025:9581 https://cve.radiocsirt.org/vuln/suse-su-2025:0117-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0117-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53064 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 113 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again. In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 113 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again. In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53064 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3509 <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3509