https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T15:41:38.995287+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/alsa-2026:71329 ALSA-2026:71329 — Important: kernel security update 2026-09-30T15:41:44.793911+00:00

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 15 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/bdu:2026-14711 bdu:2026-14711 2026-09-30T15:41:44.794227+00:00 bdu:2026-14711 https://vulnerability.circl.lu/vuln/bell-cve-2026-80714 BELL-CVE-2026-80714 2026-09-30T15:41:44.794277+00:00

Affected: Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1163 certfr-2026-avi-1163 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à… 2026-09-30T15:41:44.794325+00:00 certfr-2026-avi-1163 https://vulnerability.circl.lu/vuln/fkie_cve-2026-80714 fkie_cve-2026-80714 2026-09-30T15:41:44.794357+00:00

In the Linux kernel, the following vulnerability has been resolved:

ipvs: do not propagate one-packet flag to synced conns

Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags.

IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn.

Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.

 https://vulnerability.circl.lu/vuln/ghsa-f6rm-x6vv-8jhg GHSA-f6rm-x6vv-8jhg 2026-09-30T15:41:44.794429+00:00

In the Linux kernel, the following vulnerability has been resolved:

ipvs: do not propagate one-packet flag to synced conns

Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags.

IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn.

Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-80714 msrc_CVE-2026-80714 — ipvs: do not propagate one-packet flag to synced conns 2026-09-30T15:41:44.794470+00:00 msrc_CVE-2026-80714 https://vulnerability.circl.lu/vuln/opensuse-su-2026:21910-1 openSUSE-SU-2026:21910-1 — Security update for the Linux Kernel 2026-09-30T15:41:44.794505+00:00

Security update for the Linux Kernel

 https://vulnerability.circl.lu/vuln/rhsa-2026:71329 RHSA-2026:71329 — Red Hat Security Advisory: kernel security update 2026-09-30T15:41:44.796382+00:00

kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib kernel: netfilter: nf_queue: hold bridge skb->dev while queued kernel: pppoe: reload header pointer after dev_hard_header() kernel: ipvs: do not propagate one-packet flag to synced conns kernel: nvme-tcp: reject a read that transferred too few bytes

 https://vulnerability.circl.lu/vuln/rlsa-2026:71329 RLSA-2026:71329 — Important: kernel security update 2026-09-30T15:41:44.796441+00:00

Affected: Rocky Linux:8: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)

* kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912)

* kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121)

* kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714)

* kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/suse-su-2026:23881-1 SUSE-SU-2026:23881-1 — Security update for the Linux Kernel 2026-09-30T15:41:44.796499+00:00

Security update for the Linux Kernel

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-80714 UBUNTU-CVE-2026-80714 2026-09-30T15:41:44.797722+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 246 more

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags. IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn. Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.