Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.8

linux-azure-fde

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.8

linux-intel-5.13

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.8

linux-allwinner-5.19

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-intel-iot-realtime

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-nvidia-6.2

linux-nvidia-6.5

linux-oem-5.17

linux-oem-6.0

linux-oem-6.1

linux-oem-6.5

linux-oracle-6.5

linux-realtime

linux-riscv-5.19

linux-riscv-6.5

linux-starfive-5.19

linux-starfive-6.2

linux-starfive-6.5

linux-aws-6.14

linux-aws-6.17

linux-azure-6.11

linux-azure-6.14

linux-azure-6.17

linux-azure-fde-6.14

linux-azure-fde-6.17

linux-azure-nvidia-6.14

linux-gcp-6.11

linux-gcp-6.14

linux-gcp-6.17

linux-hwe-6.11

linux-hwe-6.14

linux-hwe-6.17

linux-hwe-7.0

linux-lowlatency-hwe-6.11

linux-nvidia-6.11

linux-nvidia-6.17

linux-nvidia-7.0

linux-oem-6.11

linux-oem-6.14

A vulnerability in the Linux kernel's KVM subsystem affects Hygon Family 18h CPUs, derived from AMD Family 17h (Zen1) silicon. The issue involves stale IsRunning=1 bit reads during ICR write emulation, causing missed VM-Exits and hung virtual CPUs, leading to unbounded delays in guest execution. This flaw has been addressed by extending the existing workaround for AMD Family 17h to cover Hygon Family 18h, disabling AVIC IPI virtualization to ensure correct emulation. The vulnerability has a CVSS score of 7.1 (medium severity) and a patch is available. The vendor advisory confirms the fix and recommends updating to patched kernel versions.

The Linux kernel vulnerability CVE-2026-64172 concerns the KVM subsystem's handling of AVIC IPI virtualization on Hygon Family 18h CPUs. Due to erratum #1235, hardware may read a stale IsRunning=1 bit during ICR write emulation, causing the kernel to miss the VM-Exit event AVIC_IPI_FAILURE_TARGET_NOT_RUNNING on the sending virtual CPU. This omission prevents KVM from waking blocking target vCPUs, resulting in hung vCPUs and unbounded guest execution delays. The fix disables AVIC IPI virtualization on affected CPUs, ensuring that every non-self IPI triggers a VM-Exit and is properly emulated. The vulnerability affects multiple Linux kernel versions prior to 7.0.0-28.28.1 and numerous specific kernel builds. The vendor advisory from Ubuntu confirms the availability of patches and recommends system updates and reboots to apply the fix.

Detailed information about Linux hwe edge: (In the Linux kernel, the following vulnerability has been resolved: K ...) affecting null linux-hwe-edge. Get real-t

Linux hwe edge: (In the Linux kernel, the following vulnerability has been resolved: K ...) - Live Threat Intelligence - Threat Radar | OffSeq.com

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)… (CVE-2026-64172)

Threats Tagged 'ubuntu-cve-2026-64172'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-64172'

Lead Pen Test Professional