The vulnerability in the `drivers/media/radio/radio-keene.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/media/radio/radio-keene.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100693 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full BUG If an OCFS2 inode has both inline and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100361 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100882 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2....

PT-2026-76850

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

MINI-JG4P-MFW4-G2MR

Bulletin has no description...

MINI-44P3-8QVP-RGFQ

Bulletin has no description...

MINI-9RV6-38HX-8M8V

Bulletin has no description...

MINI-G6F4-X39Q-RPF8

Bulletin has no description...

CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at

Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...

EUVD-2026-59950

Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...

MINI-WJM7-59PC-6W44

Bulletin has no description...

MINI-V43G-5H5M-29MV

Bulletin has no description...

PT-2026-89055

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

SUSE CVE-2026-74476

In the Linux kernel, the following vulnerability has been resolved: veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that are shared, locked, have frags, or do not have enough headroom. It...

SUSE CVE-2026-74571

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer dereference, address:...

MINI-52JX-Q7R3-QF5W

Bulletin has no description...

MINI-5MV4-4876-F6RR

Bulletin has no description...

MINI-F8J5-W365-949F

Bulletin has no description...

Security Bulletin: This Power System update is being released to address CVE-2026-17042

Summary Power Systems Firmware is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This...