PT-2026-82240

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow exists in the ZFS filesystem support, which can be triggered by malformed on-disk metadata. This flaw may lead to incorrect memory allocation and subsequent out-of-bounds...

PT-2026-82144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where the handle reply function stores a ceph mds request pointer in the current-journal info variable while populating the inode and dentry cache...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

PT-2026-82153

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the root level validation of the rtrefcount btree within the XFS file system. The functions xfs rtrefcountbt verify and xfs iformat rtrefcount incorrectly u...

Linux Distros Unpatched Vulnerability : CVE-2026-79155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute...

PT-2026-82241

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...

CVE-2025-70290

An integer overflow vulnerability exists in the ZFS filesystem support of Denx U-Boot versions prior to 2026.04 . This flaw can be triggered by malformed on-disk metadata , resulting in incorrect memory allocation and subsequent out-of-bounds memory access . This condition may lead to a system cr...

Linux Distros Unpatched Vulnerability : CVE-2026-80535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this...

Linux Distros Unpatched Vulnerability : CVE-2026-80533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agib...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...

Linux Distros Unpatched Vulnerability : CVE-2026-80536

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read...

Linux Distros Unpatched Vulnerability : CVE-2026-80532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list...

Linux Distros Unpatched Vulnerability : CVE-2026-80531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...

Linux Distros Unpatched Vulnerability : CVE-2026-79088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-79276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system...

Linux Distros Unpatched Vulnerability : CVE-2026-78985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-78959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-79206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-79143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...