https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:09:23.332201+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3640 CVE-2021-3640 2026-09-29T19:09:23.353237+00:00

Affected: kernel

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

 https://vulnerability.circl.lu/vuln/usn-5265-1 USN-5265-1 — linux, linux-aws, linux-aws-5.11, linux-aws-5.13, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.13, linux-kv… 2026-09-29T19:09:23.353334+00:00

Affected: Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-aws-5.13, Ubuntu:20.04:LTS: linux-azure-5.11, Ubuntu:20.04:LTS: linux-gcp-5.11, Ubuntu:20.04:LTS: linux-hwe-5.13, Ubuntu:20.04:LTS: linux-oem-5.13, Ubuntu:20.04:LTS: linux-oracle-5.11

Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-27820)

It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640)

Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752)

It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)

It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001)

It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4090)

Felix Wilhelm discovered that the KVM implementation in the…