uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line tool set developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from a logical error in the ln function. This error may cause failures when processing filenames that are not in UTF-8 encoding, resulting in...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from a logical error in the ln function. This vulnerability could allow local attackers to manipulate existing symbolic links, redirecting fil...

uutils coreutils: Input validation error vulnerability

uutils coreutils is a cross-platform core command-line tool set developed by Uutils Open Source. uutils coreutils has a vulnerability related to input validation. This vulnerability stems from an error in the env function; when the -S option is used, the command-line parameters are not properly...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a security vulnerability in uutils coreutils, which stems from a logical error in the tr function. This error incorrectly defines graphic character classes and printable character classes,...

PT-2026-34347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine idxd component where an invalid memory access can occur. This happens if a first Function Level Reset FLR completes successfully, but a subsequent second...

PT-2026-34524

Name of the Vulnerable Software and Affected Versions DDEV versions prior to 1.25.2 Description DDEV is an open-source tool for running local web development environments for PHP and Node.js. The software performs unsanitized extraction of archives from remote sources without path validation with...

CVE-2026-31443: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supported by the hardware, and an error that causes Function Level Reset FLR is received, the driver will try to restore the...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Red Database CCH_RELEASE Buffer Overflow DoS

The vulnerability of the CCHRELEASE function in the cch.cpp module of the “Red Database” database management system is related to a violation of expected behavior. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service failure...

Linux kernel virtio_net receive_mergeable buffer overflow DoS

The vulnerability of the receivemergeable function in the drivers/net/virtionet.c file of the Linux kernel’s network device driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Firebird SDL_info DoS

The vulnerability of the SDLinfo function in the Firebird database management system is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013763 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013623)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013623 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent decltag from being referenced in funcproto arg Syzkaller managed to hit another...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013643)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013643 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmuxops::getfunctionname While the API contract in docs...

Linux Distros Unpatched Vulnerability : CVE-2026-31468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfiopcicorefeaturedmabuf...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013810 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013842 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only stat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013608 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter kasprintf would return NULL pointer when kmallo...

CVE-2026-41136 free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

free5GC AMF provides Access & Mobility Management Function AMF for free5GC, an an open-source project for 5th generation 5G mobile core networks. Prior to version 1.4.3, the HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switc...

CVE-2026-41135

CVE-2026-41135 affects free5GC UDR (PCF) prior to version 1.4.3. The root cause is a faulty router.Use() call inside an HTTP handler that registers a new CORS middleware on every incoming request, causing the Gin router to permanently grow its handler chain. This leads to progressive memory exhau...