https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T15:44:14.428688+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bell-cve-2026-74746 BELL-CVE-2026-74746 2026-10-02T15:44:14.466338+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1163 certfr-2026-avi-1163 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-10-02T15:44:14.466446+00:00 certfr-2026-avi-1163 https://vulnerability.circl.lu/vuln/fkie_cve-2026-74746 fkie_cve-2026-74746 2026-10-02T15:44:14.466478+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: publish GC-visible tuple last

nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.

KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).

 https://vulnerability.circl.lu/vuln/ghsa-4hwc-233g-5mv3 GHSA-4hwc-233g-5mv3 2026-10-02T15:44:14.466526+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: publish GC-visible tuple last

nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.

KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-74746 msrc_CVE-2026-74746 — netfilter: flowtable: publish GC-visible tuple last 2026-10-02T15:44:14.466559+00:00 msrc_CVE-2026-74746 https://vulnerability.circl.lu/vuln/rhsa-2026:73645 RHSA-2026:73645 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update 2026-10-02T15:44:14.466586+00:00

kernel: linux/dim: Fix divide by 0 in RDMA DIM kernel: ALSA: 6fire: fix use-after-free on disconnect kernel: sctp: purge outqueue on stale COOKIE-ECHO handling kernel: tipc: fix double-free in tipc_buf_append() kernel: netfilter: conntrack: remove sprintf usage kernel: dm log: fix out-of-bounds write due to region_count overflow kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp kernel: net: pull headers in qdisc_pkt_len_segs_init() kernel: zram: fix use-after-free in zram_bvec_write_partial() kernel: i2c: stub: Reject I2C block transfers with invalid length kernel: net: qrtr: restrict socket creation to the initial network namespace kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability kernel: dm-verity: fix buffer overflow in FEC calculation kernel: netfilter: flowtable: publish GC-visible tuple last

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-74746 UBUNTU-CVE-2026-74746 2026-10-02T15:44:14.466646+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:Pro:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:Pro:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3 and 219 more

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).