kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032288 advisory. In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

PT-2026-82241

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...

CVE-2025-70293

An integer overflow vulnerability exists in Denx U-Boot versions prior to 2026.04 . The flaw is located in the ext4fs_get_bgdtable function, where an incorrect size calculation results in an underallocated buffer. This buffer is subsequently used in a memcpy() operation, which could lead to arbit...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JWE.deserialize method jwcrypto/jwe.py:555, which calls rawjwe.split'.' on the input before checking that the compact serialization has the required five segments . An attacker...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098751 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ...

PT-2026-82353

Name of the Vulnerable Software and Affected Versions Spring Integration versions 7.0.0 through 7.0.5 Spring Integration versions 6.5.0 through 6.5.10 Spring Integration versions 6.4.0 through 6.4.12 Spring Integration versions 5.5.x and earlier Spring Integration version 7.1.0 Description The...

EUVD-2025-210792

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

PT-2026-82104

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the Seattle FilmWorks plugin occurs when processing a specially crafted SFW image file. The plugin allocates a Variable-Length Array VLA—an array whose size is determined at runtime—on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104597 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitsetsize overflow on 32bit machines Commit c20e36b7631d dm log: fix out-of-bounds...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104545 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist...

ROS-20260826-73-0006

The vulnerability of the ath9khifusballoctxurbs function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker t...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2026-71054: Allocation of Resources Without Limits or Throttling

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098712 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in icesetringparam In icesetringparam, txrings and xdprings are allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-68763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098872 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queueprioritymap Fix a critical memory...

Linux Distros Unpatched Vulnerability : CVE-2026-79902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA o...

The vulnerability of the edac_mc_alloc() function in the drivers/edac/edac_mc.c module of the EDAC (Error Detection and Correction) kernel driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the edacmcalloc function in the drivers/edac/edacmc.c module of the EDAC driver for the Linux operating system involves the allocation of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...