<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T02:50:31.643576+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/704bd019-9a32-4ac5-8221-9b785a82eb13/export</id>
    <title>704bd019-9a32-4ac5-8221-9b785a82eb13</title>
    <updated>2026-09-17T02:50:31.668655+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "704bd019-9a32-4ac5-8221-9b785a82eb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80897", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvh2d7b6hh2b", "content": "CVE-2026-80897 - Linux kernel netfs flaw leaves readahead folio refs held on iterator prep failure, risking memory exhaustion. CVSS N/A. Currently unpatched. If you run a kernel with netfs, monitor for updates and test mitigations. https://www.valtersit.com/cve/CVE-2026-80897/", "creation_timestamp": "2026-09-14T02:20:03.940736Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/704bd019-9a32-4ac5-8221-9b785a82eb13/export"/>
    <published>2026-09-14T02:20:03.940736+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4d9cd29d-9f4d-4ed7-9c88-3e5f9614d6f9/export</id>
    <title>4d9cd29d-9f4d-4ed7-9c88-3e5f9614d6f9</title>
    <updated>2026-09-17T02:50:31.671191+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4d9cd29d-9f4d-4ed7-9c88-3e5f9614d6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80897", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117266959682346167", "content": "CVE-2026-80897 - Linux kernel netfs flaw leaves readahead folio refs held on iterator prep failure, risking memory exhaustion. CVSS N/A. Currently unpatched. If you run a kernel with netfs, monitor for updates and test mitigations. https://www.valtersit.com/cve/CVE-2026-80897/", "creation_timestamp": "2026-09-14T02:11:06.837854Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4d9cd29d-9f4d-4ed7-9c88-3e5f9614d6f9/export"/>
    <published>2026-09-14T02:11:06.837854+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/37930345-e1d2-4345-a63b-439068e3af0f/export</id>
    <title>37930345-e1d2-4345-a63b-439068e3af0f</title>
    <updated>2026-09-17T02:50:31.671335+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "37930345-e1d2-4345-a63b-439068e3af0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80894", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mveyx2b5dw2e", "content": "CVE-2026-80894: Linux kernel iommufd flaw passes wrong hwpt on device replace, causing fault response mismatches. Impact unclear; CVSS N/A. Patch status unknown\u2014assume risk. Check your kernel version and update immediately if a fix https://www.valtersit.com/cve/CVE-2026-80894/", "creation_timestamp": "2026-09-13T06:50:02.869268Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/37930345-e1d2-4345-a63b-439068e3af0f/export"/>
    <published>2026-09-13T06:50:02.869268+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5049e287-1427-4ad5-b15c-1e2c43833c77/export</id>
    <title>5049e287-1427-4ad5-b15c-1e2c43833c77</title>
    <updated>2026-09-17T02:50:31.671442+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5049e287-1427-4ad5-b15c-1e2c43833c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80894", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117262360157893066", "content": "CVE-2026-80894: Linux kernel iommufd flaw passes wrong hwpt on device replace, causing fault response mismatches. Impact unclear; CVSS N/A. Patch status unknown\u2014assume risk. Check your kernel version and update immediately if a fix https://www.valtersit.com/cve/CVE-2026-80894/", "creation_timestamp": "2026-09-13T06:40:23.085639Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5049e287-1427-4ad5-b15c-1e2c43833c77/export"/>
    <published>2026-09-13T06:40:23.085639+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12d412dc-29a0-49f2-989f-2b9520cc288a/export</id>
    <title>12d412dc-29a0-49f2-989f-2b9520cc288a</title>
    <updated>2026-09-17T02:50:31.671543+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12d412dc-29a0-49f2-989f-2b9520cc288a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvdozyszpc2v", "content": "CVE-2026-80890: Linux kernel SCTP flaw allows stale cookies with mismatched verification tags to bypass checks, risking connection hijacking or DoS. CVSS N/A, unpatched. Patch when available; audit SCTP exposure now. https://www.valtersit.com/cve/CVE-2026-80890/ #CVE #infosec #Li", "creation_timestamp": "2026-09-12T18:20:04.219508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12d412dc-29a0-49f2-989f-2b9520cc288a/export"/>
    <published>2026-09-12T18:20:04.219508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5622a614-8ec4-4c3f-903b-d4db5839f3cb/export</id>
    <title>5622a614-8ec4-4c3f-903b-d4db5839f3cb</title>
    <updated>2026-09-17T02:50:31.671648+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5622a614-8ec4-4c3f-903b-d4db5839f3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117259410713007892", "content": "CVE-2026-80890: Linux kernel SCTP flaw allows stale cookies with mismatched verification tags to bypass checks, risking connection hijacking or DoS. CVSS N/A, unpatched. Patch when available; audit SCTP exposure now. https://www.valtersit.com/cve/CVE-2026-80890/ #CVE #infosec #Li", "creation_timestamp": "2026-09-12T18:10:17.534621Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5622a614-8ec4-4c3f-903b-d4db5839f3cb/export"/>
    <published>2026-09-12T18:10:17.534621+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/45fa5ce1-50ca-476c-8c6c-d443c312e219/export</id>
    <title>45fa5ce1-50ca-476c-8c6c-d443c312e219</title>
    <updated>2026-09-17T02:50:31.671746+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "45fa5ce1-50ca-476c-8c6c-d443c312e219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80893", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117252371471243753", "content": "CVE-2026-80893: Linux kernel hugetlb fork() flaw can corrupt swap entries while clearing userfaultfd-wp\u2014potentially leaking or altering sensitive memory. CVSS not disclosed, still unpatched. If you run workloads on hugetlb with uffd, test mitigations now. Details: https://www.val", "creation_timestamp": "2026-09-11T12:20:04.814754Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/45fa5ce1-50ca-476c-8c6c-d443c312e219/export"/>
    <published>2026-09-11T12:20:04.814754+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5817af69-abc2-4435-bd6b-fe6b4d5a8da0/export</id>
    <title>5817af69-abc2-4435-bd6b-fe6b4d5a8da0</title>
    <updated>2026-09-17T02:50:31.671841+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5817af69-abc2-4435-bd6b-fe6b4d5a8da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80893", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvakhdophf27", "content": "CVE-2026-80893: Linux kernel hugetlb fork() flaw can corrupt swap entries while clearing userfaultfd-wp\u2014potentially leaking or altering sensitive memory. CVSS not disclosed, still unpatched. If you run workloads on hugetlb with uffd, test mitigations now. Details: https://www.val", "creation_timestamp": "2026-09-11T12:20:04.702740Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5817af69-abc2-4435-bd6b-fe6b4d5a8da0/export"/>
    <published>2026-09-11T12:20:04.702740+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c246a823-ba0e-4909-9c80-5535cd0e5842/export</id>
    <title>c246a823-ba0e-4909-9c80-5535cd0e5842</title>
    <updated>2026-09-17T02:50:31.671937+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c246a823-ba0e-4909-9c80-5535cd0e5842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80892", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvaafgtekt2c", "content": "CVE-2026-80892: Linux kernel EROFS flaw lets small image pin hundreds of MiB of vmalloc memory on high-CPU systems via oversized LZMA dictionaries. CVSS N/A, unpatched. Risk of memory exhaustion. Cap stream pool or update immediately if this is a threat model. Details: https://ww", "creation_timestamp": "2026-09-11T09:20:03.874818Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c246a823-ba0e-4909-9c80-5535cd0e5842/export"/>
    <published>2026-09-11T09:20:03.874818+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/05f674e5-fd35-41f2-bb38-227117c252eb/export</id>
    <title>05f674e5-fd35-41f2-bb38-227117c252eb</title>
    <updated>2026-09-17T02:50:31.672032+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "05f674e5-fd35-41f2-bb38-227117c252eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80892", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117251624245588384", "content": "CVE-2026-80892: Linux kernel EROFS flaw lets small image pin hundreds of MiB of vmalloc memory on high-CPU systems via oversized LZMA dictionaries. CVSS N/A, unpatched. Risk of memory exhaustion. Cap stream pool or update immediately if this is a threat model. Details: https://ww", "creation_timestamp": "2026-09-11T09:10:02.643263Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/05f674e5-fd35-41f2-bb38-227117c252eb/export"/>
    <published>2026-09-11T09:10:02.643263+00:00</published>
  </entry>
</feed>
