https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:37:50.342072+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/alsa-2026:63128 ALSA-2026:63128 — Important: kernel security update 2026-09-29T19:37:51.099677+00:00

Affected: AlmaLinux:10: kernel, AlmaLinux:10: kernel-64k, AlmaLinux:10: kernel-64k-core, AlmaLinux:10: kernel-64k-debug, AlmaLinux:10: kernel-64k-debug-core, AlmaLinux:10: kernel-64k-debug-devel, AlmaLinux:10: kernel-64k-debug-devel-matched, AlmaLinux:10: kernel-64k-debug-modules, AlmaLinux:10: kernel-64k-debug-modules-core, AlmaLinux:10: kernel-64k-debug-modules-extra and 65 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/bell-cve-2026-64387 BELL-CVE-2026-64387 2026-09-29T19:37:51.100447+00:00

Affected: Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1031 certfr-2026-avi-1031 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-09-29T19:37:51.100498+00:00 certfr-2026-avi-1031 https://vulnerability.circl.lu/vuln/fkie_cve-2026-64387 fkie_cve-2026-64387 2026-09-29T19:37:51.100532+00:00

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix query directory replay double-free

A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_query_directory_init() fails before the next send, cleanup retains the previous buffer type and frees that response again.

Reset response bookkeeping before each attempt to prevent the stale free.

 https://vulnerability.circl.lu/vuln/ghsa-mg93-xg28-xr4m GHSA-mg93-xg28-xr4m 2026-09-29T19:37:51.100591+00:00

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix query directory replay double-free

A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_query_directory_init() fails before the next send, cleanup retains the previous buffer type and frees that response again.

Reset response bookkeeping before each attempt to prevent the stale free.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-64387 msrc_CVE-2026-64387 — smb: client: fix query directory replay double-free 2026-09-29T19:37:51.100625+00:00 msrc_CVE-2026-64387 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11476-1 openSUSE-SU-2026:11476-1 — kernel-devel-7.1.7-1.1 on GA media 2026-09-29T19:37:51.100659+00:00

kernel-devel-7.1.7-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:67114 RHSA-2026:67114 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-09-29T19:37:51.101105+00:00

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() kernel: smb: client: fix query directory replay double-free

 https://vulnerability.circl.lu/vuln/rlsa-2026:63128 RLSA-2026:63128 — Important: kernel security update 2026-09-29T19:37:51.101143+00:00

Affected: Rocky Linux:10: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)

* kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)

* kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)

* kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)

* kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)

* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/suse-su-2026:23477-1 SUSE-SU-2026:23477-1 — Security update for the Linux Kernel 2026-09-29T19:37:51.101204+00:00

Security update for the Linux Kernel

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-64387 UBUNTU-CVE-2026-64387 2026-09-29T19:37:51.101871+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 154 more

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_query_directory_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2527 WID-SEC-W-2026-2527 — Linux Kernel: Mehrere Schwachstellen 2026-09-29T19:37:51.102259+00:00

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, dazu können DoS-Angriffe, die Offenlegung von Informationen, die Beschädigung des Speichers oder die Umgehung von Sicherheitsmaßnahmen gehören.