CVE-2026-67440: Missing Authorization

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...

Linux Distros Unpatched Vulnerability : CVE-2026-72245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be...

Linux Distros Unpatched Vulnerability : CVE-2026-72484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if...

Linux Distros Unpatched Vulnerability : CVE-2026-72180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd...

Linux Distros Unpatched Vulnerability : CVE-2026-72486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofde...

Linux Distros Unpatched Vulnerability : CVE-2026-72102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmearlycreate: fix freeing used table on dmresume failure If dmresume fails, the kernel attempts to free table with dmtabledestroy, but the table was already...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101965)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101965 advisory. In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the ppcount scan to the ppe array aixpartition reads the physical volume...

Linux Distros Unpatched Vulnerability : CVE-2026-72214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via...

Linux Distros Unpatched Vulnerability : CVE-2026-72332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctxsyncdebugbo amdxdnahwctxsyncdebugbo invoke...

Linux Distros Unpatched Vulnerability : CVE-2026-72079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unboun...

CVE-2026-72135

A flaw was found in the Linux kernel's Trusted Platform Module TPM character devices. These devices, intended for sequential command processing, incorrectly allow positional input/output I/O operations. A local attacker can exploit this by using a large offset in a positional read operation,...

CVE-2026-72116

A flaw was found in the Linux kernel's Broadcom Controller Area Network CAN bus driver. When a CAN device is removed, the driver may fail to properly manage its receive and transmit operations. This can lead to receive filters not being correctly re-enabled after updates, preventing expected data...

CVE-2026-72108

A flaw was found in the Linux kernel's device-mapper dm thin metadata component. When operations involving metadata snapshots, such as reserving or releasing a snapshot, encounter a commit failure, the system can write an inconsistent 'heldroot' to disk. This can lead to metadata corruption withi...

CVE-2026-72107

A flaw was found in the Linux kernel's device-mapper dm-era component. This vulnerability arises from an incorrect calculation of writeset blocks, which can lead to an out-of-bounds memory access. An attacker could potentially exploit this to cause a denial of service or other undefined behavior...

CVE-2026-72103

A flaw was found in the Linux kernel's device-mapper dm component. A refactoring error caused the caller's thread keyring, which can contain sensitive data like LUKS volume keys, to persist in memory longer than intended. This issue allows a local attacker with administrative privileges to recove...

CVE-2026-72102

A flaw was found in the Linux kernel's device mapper DM subsystem. During certain resume operations, the kernel might attempt to free a memory table that has already been released. This error, known as a double-free vulnerability, can lead to memory corruption. A successful exploit could result i...

CVE-2026-72074

A flaw was found in the Linux kernel's ims-pcu driver. A type confusion vulnerability exists in the CDC union descriptor parsing, where the driver trusts the bMasterInterface0 value without proper verification. This could allow a local attacker, or a malicious USB device, to overwrite the private...

CVE-2026-72070

A flaw was found in the Linux kernel's libertastf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtffreeadapter function, responsible for freeing adapter resources, does not properly synchronize...

CVE-2026-72058

A flaw was found in the Linux kernel's ixp4xxhss network driver. The ixp4xxhssprobe function incorrectly allocates two High-Level Data Link Control HDLC network devices instead of one. This programming error leads to a memory leak, as the initially allocated device is not properly unregistered an...

CVE-2026-72030

A flaw was found in the Linux kernel's libata-core component. A malicious device, or a local attacker with control over a device, could provide an invalid count for concurrent positioning ranges. This improper handling of input could lead to a buffer overflow, potentially causing the system to...