Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053238 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmctest: Fix NULL dereference on allocation failure If the test-highmem = allocpages...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073363 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map-ops-eltfree if eltalloc fails In paths where tracingmapeltalloc failed t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053401 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2dioendiowrite...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053216 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfiointxenable If vfioirqctxalloc failed will lead to 'nam...

CVE-2026-82846

The Masteriyo LMS WordPress plugin (versions 1.18.0-2.3.3 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw because it fails to properly sanitize and escape certain course settings. An attacker with a course-author role can inject malicious scripts into these settings, which then execut...

AZL-99708 CVE-2026-86141 affecting package libxml2 2.11.5-10

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

EUVD-2026-71834

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

libxml2 versions before 2.15.4 contain a NULL pointer dereference in the xmlregexp module, specifically in the xmlRegNewParserCtxt function. The root cause is a missing string length calculation after a strdup failure and NULL check, leading to a potential crash. The CVSS 3.1 score is 2.9 (Low) w...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

SUSE CVE-2026-80782

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc-input if no input is claimed magicmouseinputmapping caches the first hidinput's inputdev in msc-input while the report descriptor is parsed, and the rest of the driver treats a non-NULL...

SUSE CVE-2026-80826

In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00addisourb When TD creation fails for the last packet of an isochronous URB, c67x00addisourb gives the URB back before updating the endpoint scheduling state. c67x00givebackurb frees the UR...

SUSE CVE-2026-80856

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

CVE-2026-86141: Unchecked Return Value

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

PT-2026-86302

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

PT-2026-91911

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

Linux Distros Unpatched Vulnerability : CVE-2026-85008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from t...