kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset

A flaw was found in the Linux kernel's drm/i915/gem component. This vulnerability occurs because the sgpage function incorrectly scales pread/pwrite operations for physical Buffer Objects BO when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-75145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long...

CVE-2026-16933

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16933

IBM Power Systems firmware (CWE-190 integer overflow) in the BMC/FSP-host interface allows an attacker with root or service-account access to read/write arbitrary host memory, achieving full control of the host and all partitions (CVSS 8.2 HIGH). Remediation requires upgrading to specific firmwar...

EUVD-2026-62582

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

MINI-MCWM-R84M-MVWM

Bulletin has no description...

CVE-2026-72278

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 systems. This vulnerability occurs when a guest operating system attempts to access the Virtualization Nested Control Register VNCR page. If the guest reads from VNCR before writing to it, KVM may incorrectly handle...

PT-2026-78582

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...

CVE-2026-72460

A flaw was found in the Linux kernel's AppArmor security module. When changing a security profile, the aachangeprofile function might attempt to use an invalid security label before properly checking if the label was successfully created. This oversight could allow a local attacker to trigger a...

UBUNTU-CVE-2026-74966

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-72146

A flaw was found in the Linux kernel's dmaengine component. A race condition exists where an interrupt handler or thread may attempt to access uninitialized data structures immediately after an interrupt is requested but before proper initialization. This can lead to invalid memory access,...

Linux Distros Unpatched Vulnerability : CVE-2026-72107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in target-relative blocks, but eramap calculates the writeset block befor...

CVE-2026-68462

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter verifier, responsible for ensuring the safety of BPF programs, incorrectly processed negative constant offsets when accessing buffer pointers. This oversight could allow a local attacker to craft a malicious BPF program that...

CVE-2026-68470

A flaw was found in the Linux kernel's mac80211 wifi driver. Improper validation of extension-frame layouts before processing received frames could allow a remote attacker to send specially crafted S1G beacon extension frames. This could lead to incorrect memory access when reading network header...

MINI-QMHW-4F3W-X8WX

Bulletin has no description...

MINI-6566-PV4V-GR3F

Bulletin has no description...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100107 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so...

MINI-49GX-65VV-M985

Bulletin has no description...

CVE-2026-74564

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...