SUSE CVE-2026-72224

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

SUSE CVE-2026-72263

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fix memory leak in sndsofloadtopology When the topology filename contains "dummy" and tplgcnt is 0, the function returns -EINVAL directly without freeing the tplgfiles allocated by kcalloc at line 2497. This...

SUSE CVE-2026-72268

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfbprobe In tdfxfbprobe, the memory allocated for modelist using fbvideomodetomodelist when CONFIGFB3DFXI2C is defined, is not freed in the subsequent error paths. Fix that by callin...

SUSE CVE-2026-72316

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

SUSE CVE-2026-72457

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

UBUNTU-CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-093023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093023 advisory. A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure,...

Linux Distros Unpatched Vulnerability : CVE-2026-80684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails...

The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-81285: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

PT-2026-82984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the KVM s390 PCI component when the airq iv create function fails to allocate an AIBV Airq Interrupt Vector and returns NULL. Because the return value was no...

PT-2026-82973

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs external attr find function fails to properly validate the look-ahead attribute-list entry when resolving an attribute lookup with a...

CVE-2026-80616: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

PT-2026-82910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero issue exists in the enetc4 default rings allocation function when distributing rings among Physical Functions PF and Virtual Functions VF. This occurs in the i.MX94 seri...

Linux Distros Unpatched Vulnerability : CVE-2026-80179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed...

PT-2026-86733

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN ON on -ENOMEM in cfg802154 switch netns It's pointless to call WARN ON in case of an allocation failure in dev change net namespace and device rename, since it only leads to useless splats caused by...

CVE-2026-82254: Uncaught Exception

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

Linux Distros Unpatched Vulnerability : CVE-2026-80710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: p11-kit (UTSA-2026-032284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032284 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the...