CVE-2026-89509: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f "RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj" requires drivers implementing counter ops to embed struct rdmacounter in a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107312 advisory. In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues doreqfilebacked calls blkmqcompleterequest synchronously or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107284 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmisysfsregisterhandle KASAN reported a null-ptr-deref...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107296 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc...

Linux Distros Unpatched Vulnerability : CVE-2026-79590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that...

PT-2026-90173

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device-private, either directly or through the DASD DEFINE ATTR macro...

PT-2026-90158

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos assoc ioctl isst if clos assoc validates the user-supplied socket id with 'socket id topology max packages', but isst common.sst inst is allocated with topology max packages entries,...

PT-2026-90200

In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt locks init private installs NLM file lock operations even when nlmclnt find lockowner fails to allocate a lockowner. nlmclnt proc then returns -ENOMEM, but the V...

PT-2026-90450

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcg video init In uvcg video init, if kthread run worker fails, the error logged uses uvcg err, however, the pointer it uses: video-uvc is not assigned at this point, triggering ...

PT-2026-90244

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sending multiple segments whose cumulative length exceeds the rq pages arr...

PT-2026-90378

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroy client releases a client's open owners, but a lock owner whose only reference is a blocked lock nbl stays on cl ownerstr hashtbl. client has state does not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107309 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107280 advisory. In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereferen...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107310 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible fo...

RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:66460)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

The vulnerability of the gf_media_map_esd() function in the media_tools/isom_tools.c file of the GPAC multimedia platform allows a intruder to cause a service failure.

The vulnerability of the gfmediamapesd function in the mediatools/isomtools.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_isom_get_user_data_count() function in the isomedia/isom_read.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomgetuserdatacount function in the isomedia/isomread.c file of the multimedia platform GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-90234

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix this rq assumptions in dispatch kfuncs Under core scheduling, dispatch runs from within the core-wide pick and can target a sibling rq, so ops.dispatch may execute on a CPU different from the dispatched rq's. Sever...

RHEL 10 : gstreamer1-plugins-base (RHSA-2026:66460)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66460 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

PT-2026-90233

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix rq-core pick corruption under core scheduling Core scheduling's pick next task picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consiste...