https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:59:37.741888+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0825 CERTFR-2025-AVI-0825 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provo… 2026-09-30T06:59:38.686908+00:00 CERTFR-2025-AVI-0825 https://vulnerability.circl.lu/vuln/bdu:2025-15742 bdu:2025-15742 2026-09-30T06:59:38.687058+00:00 bdu:2025-15742 https://vulnerability.circl.lu/vuln/bell-cve-2025-38733 BELL-CVE-2025-38733 2026-09-30T06:59:38.687088+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://vulnerability.circl.lu/vuln/fkie_cve-2025-38733 fkie_cve-2025-38733 2026-09-30T06:59:38.687148+00:00

In the Linux kernel, the following vulnerability has been resolved:

s390/mm: Do not map lowcore with identity mapping

Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocate_lowcore command line option. If the option is specified the lowcore is mapped twice, instead of only once.

This means that NULL pointer accesses will succeed instead of causing an exception (low address protection still applies, but covers only parts). To fix this never map the first two pages of physical memory with the identity mapping.

 https://vulnerability.circl.lu/vuln/ghsa-9w66-p46h-j52f GHSA-9w66-p46h-j52f 2026-09-30T06:59:38.687210+00:00

In the Linux kernel, the following vulnerability has been resolved:

s390/mm: Do not map lowcore with identity mapping

Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocate_lowcore command line option. If the option is specified the lowcore is mapped twice, instead of only once.

This means that NULL pointer accesses will succeed instead of causing an exception (low address protection still applies, but covers only parts). To fix this never map the first two pages of physical memory with the identity mapping.

 https://vulnerability.circl.lu/vuln/opensuse-su-2025-20081-1 openSUSE-SU-2025-20081-1 — Security update for the Linux Kernel 2026-09-30T06:59:38.687248+00:00

Security update for the Linux Kernel

 https://vulnerability.circl.lu/vuln/suse-su-2025:20994-1 SUSE-SU-2025:20994-1 — Security update for the Linux Kernel 2026-09-30T06:59:38.687831+00:00

Security update for the Linux Kernel

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-38733 UBUNTU-CVE-2025-38733 2026-09-30T06:59:38.688415+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 90 more

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocate_lowcore command line option. If the option is specified the lowcore is mapped twice, instead of only once. This means that NULL pointer accesses will succeed instead of causing an exception (low address protection still applies, but covers only parts). To fix this never map the first two pages of physical memory with the identity mapping.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2025-1988 WID-SEC-W-2025-1988 — Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-09-30T06:59:38.688948+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Auswirkungen zu erzielen.