CVE-2026-89768 fs: fix user path of nested backing files

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

EUVD-2026-76680

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

CVE-2026-89768 fs: fix user path of nested backing files

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

CVE-2026-89768

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

CVE-2026-89540

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs mutexinit on sn-gssplock. Once the dentry is linked under...

CVE-2026-89540

A race condition in the Linux kernel's sunrpc component allows a local attacker to trigger concurrent access to set_gssp_clnt(). The root cause is that create_use_gss_proxy_proc_entry() publishes /proc/net/rpc/use-gss-proxy via proc_create_data() before the gssp_lock mutex is initialized, creatin...

PT-2026-90484

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing file open derives the path to be stored in the new backing file from user file-f path. This is incorrect when user file itself is a backing file, which is the case for nested...

asminject

asminject.py asminject.py 是 David Buchanan 的 dlinject 项目 的一个大幅修改版分支。它通过访问 /proc//mem 而不是通过 ptrace 附加，将任意汇编（或预编译二进制）有效载荷直接注入 x86-64、x86 和 ARM32 Linux 进程。可用于篡改受信任的进程、某些后渗透场景、从进程内存中恢复内容，以及绕过某些安全控制。只要你在主机上拥有 root 权限，就可以从容器外部注入容器化进程。 你也可以在 Bishop Fox 工具页面上阅读更多关于 asminject.py 及其起源的信息，包括 一篇详细阐述启发该工具的写作。...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053205 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifsdebugdataprocshow Skip SMB sessions that are being...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073358 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated...

CVE-2026-81684

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

EUVD-2026-67040

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

CVE-2026-81684 openssl_encrypt before 1.4.9 Information Disclosure via Command Line

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

AZL-97743 CVE-2026-74735 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

CVE-2026-74735

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

CVE-2026-74735 l2tp: fix tunnel and session refcount leak on seq_file release

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098820 advisory. In the Linux kernel, the following vulnerability has been resolved: viawdt: fix critical boot hang due to unnamed resource allocation The VIA watchdog driver uses...

Linux Distros Unpatched Vulnerability : CVE-2026-74735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfil...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: proc: Fixed a UAF in procgetinode. Fixed a race condition between rmmod and the instantiation of /proc/XXX’s inode. The bug is that pde-procops does not belong to /proc; it belongs to a module. Therefore, dereferencing it afte...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed information leakage in /proc/net/ptype In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the newly added packettype by reading the...