EUVD-2026-64363

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74676

CVE-2026-74676 affects the Linux kernel virtual terminal (VT) subsystem. The KDSKBMETA ioctl, which modifies keyboard meta mode, lacked the !perm permission check enforced by all other keyboard setter ioctls in vt_k_ioctl() . This allowed a process to change the meta mode on a non-controlling con...

Linux Distros Unpatched Vulnerability : CVE-2026-74676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl...

PT-2026-79681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtual terminal vt component where the KDSKBMETA ioctl lacks a permission check. This allows an unauthorized process to modify the keyboard meta mode on a...

CVE-2026-74676: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

Linux Distros Unpatched Vulnerability : CVE-2026-74683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index...

CVE-2026-74676: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74467

A flaw was found in the s390/qeth component of the Linux kernel. An unprivileged local user could exploit this vulnerability by invoking specific SIOCDEVPRIVATE ioctl commands, such as SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE, and SIOCQETHQUERYOAT. These commands were not properly restricte...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002902 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvmarchvcpuioctlsetfpu allows to set the floating point...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102023 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102055 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl...

CVE-2026-49431

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

CVE-2026-49429

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49430

The ZFSIOCRECVNEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption...

EUVD-2026-62241

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

CVE-2026-49431

The OpenZFS component in FreeBSD contains an access control deficiency in the ZFS_IOC_SET_PROP ioctl handler, used by zfs-set(8) . This flaw allows an unprivileged local user to incorrectly set the internal ZFS metadata flag $hasrecvd on a dataset, falsely indicating that the dataset received pro...

CVE-2026-49429

A kernel heap overflow exists in the OpenZFS component of FreeBSD operating systems. The vulnerability is triggered via the ZFS_IOC_USERSPACE_MANY ioctl (used by zfs-userspace(8)), where a 64-bit output buffer size is truncated to a 32-bit integer for kernel allocation, but the original 64-bit si...

EUVD-2026-62239

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

Linux Distros Unpatched Vulnerability : CVE-2026-72311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xevmmadviseioctl allocates...

CVE-2026-72311

A flaw was found in the Linux kernel's drm/xe driver. A local user could trigger a memory leak by repeatedly making ioctl calls that fail the L2 flush validation. This improper memory management can lead to a Denial of Service DoS due to resource exhaustion...