CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

EUVD-2025-210793

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

PT-2026-82143

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reader can experience an indefinite hang in the ceph get caps function when the client no longer holds FILE RD but the local capability state incorrectly indicates that the capability ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: e2fsprogs (UTSA-2026-061500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061500 advisory. An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a special...

Linux Distros Unpatched Vulnerability : CVE-2026-80532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list...

Linux Distros Unpatched Vulnerability : CVE-2026-80536

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098893)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098893 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning o...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098939)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098939 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098782)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098782 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting received subvolumes Currently a user can trigger ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104540 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

Linux Distros Unpatched Vulnerability : CVE-2026-80529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098707 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2writeendinline KASAN reports a use-after-free write of 408...

Linux Distros Unpatched Vulnerability : CVE-2026-80531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

Linux Distros Unpatched Vulnerability : CVE-2026-80528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...

CVE-2026-62865 TypeBot: Arbitrary server file read via Send Email block attachment path

Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...