https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:09:27 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-74746 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-74746 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1163 certfr-2026-avi-1163 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1163 https://cve.radiocsirt.org/vuln/euvd-2026-359772 EUVD-2026-359772 https://cve.radiocsirt.org/vuln/euvd-2026-359772 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74746 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: flowtable: publish GC-visible tuple last</p> <p>nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.</p> <p>KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: flowtable: publish GC-visible tuple last</p> <p>nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.</p> <p>KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-74746 https://cve.radiocsirt.org/vuln/ghsa-4hwc-233g-5mv3 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: flowtable: publish GC-visible tuple last</p> <p>nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.</p> <p>KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: flowtable: publish GC-visible tuple last</p> <p>nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.</p> <p>KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> https://cve.radiocsirt.org/vuln/ghsa-4hwc-233g-5mv3 https://cve.radiocsirt.org/vuln/msrc_cve-2026-74746 msrc_CVE-2026-74746 https://cve.radiocsirt.org/vuln/msrc_cve-2026-74746 https://cve.radiocsirt.org/vuln/rhsa-2026:73645 <p>kernel: linux/dim: Fix divide by 0 in RDMA DIM kernel: ALSA: 6fire: fix use-after-free on disconnect kernel: sctp: purge outqueue on stale COOKIE-ECHO handling kernel: tipc: fix double-free in tipc_buf_append() kernel: netfilter: conntrack: remove sprintf usage kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp kernel: net: pull headers in qdisc_pkt_len_segs_init() kernel: zram: fix use-after-free in zram_bvec_write_partial() kernel: i2c: stub: Reject I2C block transfers with invalid length kernel: net: qrtr: restrict socket creation to the initial network namespace kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability kernel: dm-verity: fix buffer overflow in FEC calculation kernel: netfilter: flowtable: publish GC-visible tuple last</p> <p>kernel: linux/dim: Fix divide by 0 in RDMA DIM kernel: ALSA: 6fire: fix use-after-free on disconnect kernel: sctp: purge outqueue on stale COOKIE-ECHO handling kernel: tipc: fix double-free in tipc_buf_append() kernel: netfilter: conntrack: remove sprintf usage kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp kernel: net: pull headers in qdisc_pkt_len_segs_init() kernel: zram: fix use-after-free in zram_bvec_write_partial() kernel: i2c: stub: Reject I2C block transfers with invalid length kernel: net: qrtr: restrict socket creation to the initial network namespace kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability kernel: dm-verity: fix buffer overflow in FEC calculation kernel: netfilter: flowtable: publish GC-visible tuple last</p> https://cve.radiocsirt.org/vuln/rhsa-2026:73645 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-74746 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 219 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 219 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-74746 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3042 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Ausweitung von Berechtigungen, die Offenlegung von Informationen, die Manipulation von Daten oder Denial-of-Service-Zustände.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3042