CVE-2026-72174

A flaw was found in the Linux kernel. A local attacker could trigger a self-deadlock condition within the huge pages hugetlb memory management subsystem. This occurs when a specific memory scan operation attempts to acquire a write lock while the same process already holds a read lock, causing th...

CVE-2026-72314

A flaw was found in the Linux kernel's regulator core. The regulatorlocktwo function, responsible for acquiring two regulators, incorrectly checks for an error code EDEADLOCK instead of the correct one EDEADLK. On certain architectures, such as MIPS, SPARC, and PowerPC, this discrepancy means tha...

CVE-2026-72100

A flaw was found in the Linux kernel's dm-integrity component. This issue occurs when the dmintegritychecklimits function fails, leading to a resource remaining locked. A local attacker could potentially trigger this condition, resulting in a system deadlock and a Denial of Service DoS...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a...

Linux Distros Unpatched Vulnerability : CVE-2026-74370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in...

Linux Distros Unpatched Vulnerability : CVE-2026-72282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cau...

Linux Distros Unpatched Vulnerability : CVE-2026-74331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler...

Linux Distros Unpatched Vulnerability : CVE-2026-74396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5rumrupdatexlt allocates and DMA...

Linux Distros Unpatched Vulnerability : CVE-2026-74315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first...

Linux Distros Unpatched Vulnerability : CVE-2026-72174

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc/taskmmu: fix hugetlb self-deadlock in pagemapscanptehole A PAGEMAPSCAN ioctl requesting PMSCANWPMATCHING on a hugetlb VMA hangs the calling thread,...

Linux Distros Unpatched Vulnerability : CVE-2026-74313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vduse: hold vduselock across IDR lookup in open path vdusedevopen looks up struct vdusedev through the IDR and then acquires dev-lock only after vduselock has...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

CVE-2026-72472

A flaw was found in the Network File System NFS component of the Linux kernel. Inadequate synchronization during the traversal of the file lock list can lead to a use-after-free UAF vulnerability. This occurs when certain functions release file locks prematurely while iterating, potentially...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

CVE-2026-74538

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A missing lock when accessing socket connection information within the isoconnectind function could lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100566 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099724 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and...