CVE-2026-23086 vsock/virtio: cap TX credit to local buffer size

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's SOVMSOCKETSBUFFERSIZE value. On the host side this means that the...

CVE-2026-23086

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's SOVMSOCKETSBUFFERSIZE value. On the host side this means that the...

CVE-2026-23059

In the Linux kernel CVE-2026-23059, the vulnerable code paths are in Scsi qla2xxx logic, specifically qla27xx_copy_fpin_pkt() and qla27xx_copy_multiple_pkt(). The frame_size reported by firmware could exceed the 64-byte iocb member in struct purex_item, causing cross-boundary memcpy writes and Fo...

GHSA-434X-W66G-QW3R bytes has integer overflow in BytesMut::reserve

Details In the unique reclaim path of BytesMut::reserve, the condition rs if vcapacity = newcap + offset uses an unchecked addition. When newcap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated...

UBUNTU-CVE-2026-22264

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

CVE-2026-22264

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38226)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38226 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003785 advisory. In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001413)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001413 advisory. The decodedata function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001544 advisory. An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004419 advisory. A missing CAPNETRAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000648 advisory. Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002349 advisory. The xfrmstatenetlink function in net/xfrm/xfrmuser.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dumponestate function calls, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002828 advisory. net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003302 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003129 advisory. Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001886 advisory. The xfrmstatenetlink function in net/xfrm/xfrmuser.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dumponestate function calls, which...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002341 advisory. net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003295 advisory. The socksetsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sksndbuf and skrcvbuf, which allows local users to cau...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003028 advisory. The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, whi...