Linux Distros Unpatched Vulnerability : CVE-2026-74666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpack...

PT-2026-79671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where packet set ring updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po-prot hook.func after releasing that lock. Th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102077 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebtredirecttg dereferences brportgetrcu return without a NULL...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

kernel: sched/psi: fix race between file release and pressure write

A flaw was found in the Linux kernel's Pressure Stall Information PSI subsystem. A race condition exists between the file release and pressure write operations, specifically concerning the priv member of struct kernfsopenfile. This can lead to a use-after-free vulnerability or a NULL dereference,...

CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

EUVD-2026-62191

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

CVE-2026-59949 yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...

Linux Distros Unpatched Vulnerability : CVE-2026-72467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Check frwrwpcreate during connect frwrwpcreate creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not...

Linux Distros Unpatched Vulnerability : CVE-2026-74395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5IBMETHODDEVXSUBSCRIBEEVENT links eventsub into sublist before initializing the fields used by th...

PT-2026-77207

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

Linux Distros Unpatched Vulnerability : CVE-2026-72424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313rtcprobe calls devmrequestirq with IRQFSHARED and &pdev-dev as the cookie, but platformsetdrvda...

CVE-2026-72016

A flaw was found in the Linux kernel's CPU hotplug mechanism on arm64 systems. When a system is booted with more maximum CPUs configured than are physically present, some CPUs are incorrectly marked as present but are not fully registered. This can lead to a kernel warning due to a null kobject...

MINI-HW6M-4HC7-X26C

Bulletin has no description...

MINI-VM7M-HXWX-XW52

Bulletin has no description...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100548 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of old filters before change Like pointed out by Sashiko 1...

RockyLinux 9 : 389-ds-base (RLSA-2026:55423)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55423 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100553 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...