Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.8

linux-azure-fde

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.8

linux-intel-5.13

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.8

linux-allwinner-5.19

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-intel-iot-realtime

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-nvidia-6.2

linux-nvidia-6.5

linux-oem-5.17

linux-oem-6.0

linux-oem-6.1

linux-oem-6.5

linux-oracle-6.5

linux-realtime

linux-riscv-5.19

linux-riscv-6.5

linux-starfive-5.19

linux-starfive-6.2

linux-starfive-6.5

linux-aws-6.14

linux-azure-6.11

linux-gcp-6.11

linux-gcp-6.14

linux-hwe-6.11

linux-hwe-6.14

linux-hwe-7.0

linux-lowlatency-hwe-6.11

linux-nvidia-6.11

linux-nvidia-7.0

linux-oem-6.11

linux-oem-6.14

linux-oem-6.8

linux-oracle-6.14

linux-raspi-realtime

linux-riscv-6.14

linux-bluefield

linux-realtime-6.14

linux

linux-aws

A self-deadlock vulnerability in the Linux kernel's Open vSwitch (openvswitch) vport subsystem was resolved. The issue occurs due to improper ordering of RCU callbacks and network device reference releases during tunnel port removal, causing the device removal process to deadlock. This flaw affects certain Linux kernel versions prior to 7.0.0-28.28 and related builds. The vulnerability has a medium severity with a CVSS score of 5.5 and does not impact confidentiality or integrity but causes denial of service by blocking device removal. A patch is available and should be applied to affected systems.

The vulnerability in the Linux kernel's openvswitch vport subsystem arises from a self-deadlock condition during the release of tunnel ports. Vports are concurrently used and protected by RCU, requiring netdev_put() to be called after the RCU grace period, either in an RCU callback or after synchronize_net(). However, rtnl_delete_link() must execute under RTNL lock and cannot run in RCU context. The existing code called synchronize_net() while holding RTNL, which is suboptimal, so the fix was to call netdev_put() in an RCU callback. The deadlock occurs because the RCU callback was scheduled after rtnl_unlock(), but rtnl_unlock() calls netdev_run_todo() and blocks until all references are released, which never happens as the RCU callback is not yet executed. The fix moves the rcu_call() before rtnl_unlock(), ensuring the callback runs timely and prevents the deadlock. This vulnerability affects Linux kernel versions prior to 7.0.0-28.28 and related builds as listed. The issue is resolved in updated kernel packages provided by Ubuntu.

Detailed information about UBUNTU-CVE-2026-46165 affecting null linux-hwe-edge. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-46165 - Live Threat Intelligence - Threat Radar | OffSeq.com

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used… (CVE-2026-46165)

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

This vulnerability concerns a self-deadlock issue in the openvswitch component's vport subsystem when releasing tunnel ports. The deadlock could potentially cause a denial of service or system hang conditions. The information is sourced from the Microsoft Security Response Center but lacks detailed technical or exploit information. No CVSS score or patch information is available, and no known active exploitation has been reported.

Detailed information about openvswitch: vport: fix self-deadlock on release of tunnel ports affecting Microsoft Security Response Center Microsoft. Get real-tim

openvswitch: vport: fix self-deadlock on release of tunnel ports - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-46165 openvswitch: vport: fix self-deadlock on release of tunnel ports - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

openvswitch: vport: fix self-deadlock on release of tunnel ports


Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used… (CVE-2026-46165)CVE-2026-46165 0 A self-deadlock vulnerability in the Linux kernel's Open vSwitch (openvswitch) vport subsystem was resolved. The issue occurs due to improper ordering of RCU callbacks and network device reference releases during tunnel port removal, causing the device removal process to deadlock. This flaw affects certain Linux kernel versions prior to 7.0.0-28.28 and related builds. The vulnerability has a medium severity with a CVSS score of 5.5 and does not impact confidentiality or integrity but causes denial of service by blocking device removal. A patch is available and should be applied to affected systems. MediumVulnerability#gcve #osv #ubuntu-cve-2026-46165 Join the discussion	GCVE Database	05/28/2026, 10:16:00 UTC Added: 07/17/2026, 10:20:21 UTC
openvswitch: vport: fix self-deadlock on release of tunnel portsCVE-2026-46165 0 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle UnknownVulnerability#gcve #csaf #cve-2026-46165 Join the discussion	GCVE Database	05/02/2026, 00:00:00 UTC Added: 05/29/2026, 21:02:14 UTC

Threats Tagged 'cve-2026-46165'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-46165'

Lead Pen Test Professional