Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099935 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, fuse-overlayfs-snapshotter, flux-helm-controller, ctop, kaniko, helm-push, buildkitd, trivy, newrelic-infrastructure-agent, kubescape, up, cilium-cli, eksctl, kubevela, zot, flux-source-controller, skaffold, k8sgpt, helm, grype, kots, melange, gitness...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: kube-conformance, etcd-fips, fuse-overlayfs-snapshotter, rke2-runtime, gendesk, runc, cilium-envoy, gitlab-rails-ce, cilium-envoy-fips, rke2-runtime-fips, k3s, etcd, localstack, backup-restore-operator, k8s-device-plugin, aws-load-balancer-controller, wuzz, terraform...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: kube-conformance, etcd-fips, fuse-overlayfs-snapshotter, rke2-runtime, gendesk, runc, cilium-envoy, gitlab-rails-ce, cilium-envoy-fips, rke2-runtime-fips, k3s, etcd, localstack, backup-restore-operator, k8s-device-plugin, aws-load-balancer-controller, wuzz, terraform...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: mattermost-fips, frankenphp-8.2, fuse-overlayfs-snapshotter, kine, rke2-runtime, vault, datadog-agent, beats-fips, elastic-agent, commercial-grafana, frankenphp-8.5, commercial-expanso-edge, mattermost, rke2-runtime-fips, zot, k3s, containerd, loki, grafana-fips,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, versitygw, longhorn-backing-image-manager-fips, buildkite-agent, sops-fips, omni-fips, minio, envconsul, karpenter-fips, apm-server-fips, newrelic-nri-kube-events-fips, jaeger-fips, sftpgo-plugin-auth, terragrunt-fips, argo-cd,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: containerd, k3s, fuse-overlayfs-snapshotter, zot, kine, loki...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, buildkitd, grype, kots, fuse-overlayfs-snapshotter, helm, ctop, kubescape, zot, cilium-cli, trivy, k8sgpt, helm-push, kaniko, newrelic-infrastructure-agent, up, flux-helm-controller, skaffold, flux-source-controller, melange, gitness, kubevela, eksctl...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k3s, aws-load-balancer-controller, wuzz, fuse-overlayfs-snapshotter, gitness, runc...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k3s, aws-load-balancer-controller, wuzz, fuse-overlayfs-snapshotter, gitness, runc...

Linux Distros Unpatched Vulnerability : CVE-2026-68095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: -...

Linux Distros Unpatched Vulnerability : CVE-2026-68149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of...

SUSE CVE-2026-68095

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: iouringenter - register sqe - fuseuringcreateringent - allocate ent but doesn't grab queueref yet - thread b: fuseconndestroy -...

CVE-2026-68149

A flaw was found in the Linux kernel. The forgetcachedacl helper function, intended to manage Access Control List ACL caching, incorrectly invalidates the ACLDONTCACHE state. This can lead to a Fuse Filesystem in Userspace filesystem returning stale cached ACL values. Consequently, this could...

CVE-2026-68095

A flaw was found in fuse-uring in the Linux kernel. A race condition exists between the registration of an I/O operation and the abortion of a FUSE connection. This can be triggered by a local attacker or a malicious application. This flaw can cause the unmount thread to hang indefinitely, leadin...

CVE-2026-68186

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged user can exploit this by registering a binfmtmisc entry with a specially crafted interpreter path on a FUSE Filesystem in Userspace mount. If the interpreter open fails, it can lead to a NULL pointer dereference whe...

CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

UBUNTU-CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

CVE-2026-68095

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: iouringenter - register sqe - fuseuringcreateringent - allocate ent but doesn't grab queueref yet - thread b: fuseconndestroy -...