CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

CVE-2026-74512

CVE-2026-74512 is a Linux kernel use-after-free in audit_del_rule() during rule deletion. The issue arises when audit_del_rule() destroys e->rule.exe via audit_remove_mark_rule() before unlinking the rule from RCU-visible lists and waiting for a grace period, allowing concurrent readers in aud...

MINI-6VWQ-4P3M-3C7Q

Bulletin has no description...

MINI-6CJ3-6CC8-PMQR

Bulletin has no description...

CVE-2026-72096

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

CVE-2026-72460

CVE-2026-72460 affects the Linux kernel’s AppArmor path: aa_change_profile() builds a replacement label with fn_label_build_in_scope() before the no_new_privs subset check, and the build helper may return NULL/ERR_PTR, with the result previously passed to aa_label_is_unconfined_subset() without I...

CVE-2026-72096

CVE-2026-72096 affects the Linux kernel’s dm-verity component, where the error counter v->corrupted_errs was not atomic, potentially causing race conditions. This could allow the call to dm_audit_log_target("max-corrupted-errors") to be skipped due to races. The issue has been resolved in the ...

EUVD-2026-59054

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: ld-relay-fips, kyverno-policy-reporter-kyverno-plugin-fips, rancher-helm, knative-net-istio-fips, rancher-system-agent, terraform, step-fips, crossplane-provider-aws-cloudfront, sriov-network-device-plugin, guac, atlas-fips, grafana-rollout-operator-fips, oauth2-prox...

MINI-6H3C-J996-38W8

Bulletin has no description...

MINI-FJM6-3WQ8-XFWQ

Bulletin has no description...

PT-2026-76438

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-72096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: make error counter atomic The error counter v-corruptederrs was not atomic, thus it could be subject to race conditions. The call to...

Linux Distros Unpatched Vulnerability : CVE-2026-74512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter...

PT-2026-72964

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit del rule audit del rule destroys e-rule.exe via audit remove mark rule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in aud...

OPENSUSE-SU-2026:11512-1 cargo-audit-0.22.2~git0.281452c-2.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, rancher-helm, aws-network-policy-agent-fips, terraform, harvester, atlas-fips, aws-iam-authenticator-fips, spiffe-helper, oauth2-proxy, crossplane-provider-aws-bedrockagent-fips, rancher-machine,...

MINI-2J6F-G6R4-P9WW

Bulletin has no description...

CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...