https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:39:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08962 bdu:2026-08962 https://cve.radiocsirt.org/vuln/bdu:2026-08962 https://cve.radiocsirt.org/vuln/bell-cve-2025-71145 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2025-71145 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0170 certfr-2026-avi-0170 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0170 https://cve.radiocsirt.org/vuln/euvd-2026-347556 EUVD-2026-347556 https://cve.radiocsirt.org/vuln/euvd-2026-347556 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71145 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: phy: isp1301: fix non-OF device reference imbalance</p> <p>A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case.</p> <p>Increment the reference count also for non-OF so that the caller can decrement it unconditionally.</p> <p>Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: phy: isp1301: fix non-OF device reference imbalance</p> <p>A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case.</p> <p>Increment the reference count also for non-OF so that the caller can decrement it unconditionally.</p> <p>Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71145 https://cve.radiocsirt.org/vuln/ghsa-8hw4-vmgm-gx5f <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: phy: isp1301: fix non-OF device reference imbalance</p> <p>A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case.</p> <p>Increment the reference count also for non-OF so that the caller can decrement it unconditionally.</p> <p>Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: phy: isp1301: fix non-OF device reference imbalance</p> <p>A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case.</p> <p>Increment the reference count also for non-OF so that the caller can decrement it unconditionally.</p> <p>Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> https://cve.radiocsirt.org/vuln/ghsa-8hw4-vmgm-gx5f https://cve.radiocsirt.org/vuln/opensuse-su-2026:20287-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20287-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0587-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0587-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-71145 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 81 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case. Increment the reference count also for non-OF so that the caller can decrement it unconditionally. Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 81 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case. Increment the reference count also for non-OF so that the caller can decrement it unconditionally. Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-71145 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0215 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0215