PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

CVE-2026-26449: NULL Pointer Dereference

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093187 advisory. The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependen...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098966 advisory. In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM...

CVE-2026-26449

A flaw in Stomper 5e2741e allows a remote attacker to trigger a null pointer dereference (or access to invalid memory) by sending a specially crafted SEND frame that lacks the mandatory destination header field . This vulnerability results in a Denial of Service (DoS) , as the server process will...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

CVE-2026-74740: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

CVE-2026-74741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098781 advisory. In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in becmdgetmacfromlist When the parameter pmacidvalid argume...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098972 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

Linux Distros Unpatched Vulnerability : CVE-2026-74740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098802 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098994 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098775 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mtinputconfigured devmkasprintf can return a NULL pointer on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098826 advisory. In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereferen...

Linux Distros Unpatched Vulnerability : CVE-2026-80520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. Tha...

Linux Distros Unpatched Vulnerability : CVE-2026-74734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098869 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads uevent device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104812 advisory. In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or...