Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005576 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has...

The vulnerability of the nfsaclsvc_encode_getaclres() function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the nfsaclsvcencodegetaclres function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality a...

The vulnerability of the __ext4_iget() function in the fs/ext4/inode.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4iget function in the fs/ext4/inode.c file of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005524 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits syzbot reported...

The vulnerability of the erofs_fc_fill_super() function in the fs/erofs/super.c file of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the erofsfcfillsuper function in the fs/erofs/super.c file of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the exfat_find() function in the fs/exfat/namei.c file of the exFAT file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exfatfind function in the fs/exfat/namei.c file of the exFAT file system in Linux’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

nfsd: provide locking for v4_end_grace

...

SUSE CVE-2026-28295

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8061-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8061-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

The vulnerability of the ext4_clu_mapped() function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4clumapped function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-20122

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...

DEBIAN-CVE-2026-28295

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the...

USN-8059-6 linux-aws, linux-aws-6.8, linux-ibm, linux-ibm-6.8, linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...

CVE-2026-28296

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed CRLF sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and...

CVE-2026-28296

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed CRLF sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and...

CVE-2026-28296 Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed CRLF sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and...

CVE-2026-28296

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed CRLF sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and...

Arbitrary File Read

Weblate is vulnerable to arbitrary file read. The vulnerability is due to improper handling of crafted symbolic links in repositories, which allows an attacker to read arbitrary files from the server file system...

gvfs 代码问题漏洞

GVfs is a virtual file system developed under the Gnome open-source project. GVfs has code vulnerabilities that stem from the unconditional trust placed in information within the passive mode response by clients. This vulnerability could allow malicious servers to detect open ports on the client’...

gvfs 注入漏洞

GVFS is a GNOME open-source virtual file system. GVFS has a vulnerability that stems from insufficient validation of file path inputs containing carriage return sequences, which could lead to the execution of arbitrary code or other serious issues...