Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005523 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in...

The vulnerability of the migrate_device_finalize() function in the mm/migrate_device.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the migratedevicefinalize function in the mm/migratedevice.c file of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubescape, fulcio-fips, falcosidekick-fips, cluster-api-aws-controller-fips, octo-sts, litestream, azuredisk-csi-fips, kyverno, aws-node-termination-handler-fips, temporal, kubernetes, aws-ebs-csi-driver-fips, cluster-api-ipam-provider-in-cluster,...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: k3s, src, kyverno, cerbos, azurefile-csi, dagdotdev, kube-vip-cloud-provider, cluster-api-gcp-controller, trivy, falcosidekick, kubernetes-csi-external-resizer, thanos, otel-cli, gcp-compute-persistent-disk-csi-driver, tflint, bank-vaults, sops, fulcio, restic,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: k3s, src, kyverno, cerbos, azurefile-csi, dagdotdev, kube-vip-cloud-provider, cluster-api-gcp-controller, trivy, falcosidekick, kubernetes-csi-external-resizer, thanos, otel-cli, gcp-compute-persistent-disk-csi-driver, tflint, bank-vaults, sops, fulcio, restic,...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.1 Release.

Red Hat OpenShift Dev Spaces 3.26.1 has been released. 3.26.1 includes CVE fixes for CVE-2025-15467, CVE-2025-6176, CVE-2026-1761, CVE-2026-0719, CVE-2025-61732, and CVE-2025-61726. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams an...

cms-security-poc

CVE-2026-31266 - Craft CMS Missing Authorization CVE Infor...

CVE-2026-23097

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

CVE-2026-23097

CVE-2026-23097: Linux kernel migrate path deadlock due to incorrect lock ordering between hugetlb folio_lock and i_mmap_rwsem. Specifically migrate_pages -> migrate_hugetlbs -> unmap_and_move_huge_page -> remove_migration_ptes -> __rmap_walk_file() acquires i_mmap_lock_read while anot...

CVE-2026-23097 migrate: correct lock ordering for hugetlb file folios

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

CVE-2026-23097

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

kernel: drm/xe: Use local fence in error path of xe_migrate_clear

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xemigrateclear The intent of the error path in xemigrateclear is to wait on locally generated fence and then return. The code is waiting on m-fence which could be the local fence but this ...

GHSA-FCV2-XGW5-PQXF sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal

Summary The legacy TUF client pkg/tuf/client.go, which supports caching target files to disk, constructs a filesystem path by joining a cache base directory with a target name sourced from signed target metadata, but it does not validate that the resulting path stays within the cache base...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56611)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56611 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migratetonode assuming...

MiracleLinux 7 : pcp-4.3.2-12.el7 (AXSA:2020-703:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-703:06 advisory. pcp: Local privilege escalation in pcp spec file %post section CVE-2019-3695 A Improper Control of Generation of Code vulnerability in the packaging ...

kernel: drm/xe: Use local fence in error path of xe_migrate_clear

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xemigrateclear The intent of the error path in xemigrateclear is to wait on locally generated fence and then return. The code is waiting on m-fence which could be the local fence but this ...

RHEL 10 : kernel (RHSA-2026:0747)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0747 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/xe: Use local fence in...

filecc (>=0.0.1, <=1.0.1), gm-i18n-migrate (>=2.7.0, <=2.9.0) +3 more potentially affected by CVE-2025-15536 via opencc (>=1.0.6, <=1.1.3)

opencc NPM version =1.0.6, =0.0.1, =2.7.0, =2.7.2, =1.0.2, =1.0.5 - wise-paas-notify-utility 1.4.10-s2t1 Source cves: CVE-2025-15536 Source advisory: SNYK:JS-OPENCC-15874418...

filecc (>=0.0.1, <=1.0.1), gm-i18n-migrate (>=2.7.0, <=2.9.0) +3 more potentially affected by CVE-2025-15536 via opencc (>=1.0.6, <=1.1.3)

opencc NPM version =1.0.6, =0.0.1, =2.7.0, =2.7.2, =1.0.2, =1.0.5 - wise-paas-notify-utility 1.4.10-s2t1 Source cves: CVE-2025-15536 Source advisory: OSV:GHSA-5PR6-CRVP-2J9F...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004476 advisory. An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after- free because the ctx is reached via the ctxlist in some...