The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xchk_btree_check_block_owner() function in the fs/xfs/scrub/btree.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xchkbtreecheckblockowner function in the fs/xfs/scrub/btree.c file of the Linux kernel operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-76631

openssl encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100528)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100528 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100382 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100575 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udfreadtagged skips CRC verification when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099936 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count duri...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100098)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100098 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100342 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ex...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100340)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100340 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099732 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4setattr...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100188 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize of a fi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100755 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100525 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical...

CVE-2026-75104: Improper Limitation of a Pathname to a Restricted Directory

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099724 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and...

PT-2026-73411

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100355 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfsbnoderead This patch introduces isbnodeoffsetvalid method that...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100148)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100148 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfatfinddirentry In exfatfinddirentry, the bufferhead...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100495)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100495 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file nam...