Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: bitland-mifs-wmi: Fixed the issue of NULL pointer dereferencing during suspend/resume operations. The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT...

ROS-20260821-73-0067

The vulnerability in the drivers/infiniband/core/cma.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and...

CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now

Executive Summary CVE-2026-68820 is an actively exploited Windows vulnerability listed in CISA’s Known Exploited Vulnerabilities KEV Catalog, with a remediation deadline as suggested by CISA BOD 26-04. CISA BOD 26-04 introduces risk-based remediation timelines ranging from 3 to 14 days, increasin...

Linux Distros Unpatched Vulnerability : CVE-2026-72050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following...

Linux Distros Unpatched Vulnerability : CVE-2026-72269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: uvesafb: fix potential memory leak in uvesafbprobe Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafbvbeinit is not free...

Linux Distros Unpatched Vulnerability : CVE-2026-72313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to the vblank of an active CRTC. Go over the list of CRTCs and pick the...

Linux Distros Unpatched Vulnerability : CVE-2026-72074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without...

Linux Distros Unpatched Vulnerability : CVE-2026-72158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is...

Linux Distros Unpatched Vulnerability : CVE-2026-72409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR...

Linux Distros Unpatched Vulnerability : CVE-2026-74413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix wrong pcigetdrvdata type in AER handlers rtw89 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume...

Linux Distros Unpatched Vulnerability : CVE-2026-72047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210testintdriverwrite and ca8210testintuserread exchange a kmalloc'd buffer pointer through a...

Linux Distros Unpatched Vulnerability : CVE-2026-72245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be...

Linux Distros Unpatched Vulnerability : CVE-2026-72171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If ...

Linux Distros Unpatched Vulnerability : CVE-2026-72479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read retur...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedu...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101995 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would...

CVE-2026-68478

A flaw was found in the Linux kernel's Memory Stick block driver memstick: msblock. A malicious Memory Stick card, crafted to report an excessive number of blocks, can cause the driver to write beyond the bounds of an allocated memory structure. This out-of-bounds write can lead to memory...

The vulnerability of the ab8500_charger.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ab8500charger.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/char/ipmi/ipmi_ipmb.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/char/ipmi/ipmiipmb.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...