Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102137 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schred: Replace direct dequeue call with peek and qdiscdequeuepeeked When red qdisc ha...

Linux Distros Unpatched Vulnerability : CVE-2026-72322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device teardown and incoming MLD query processing, leading to a Use-After-Fre...

Linux Distros Unpatched Vulnerability : CVE-2026-68463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget...

Linux Distros Unpatched Vulnerability : CVE-2026-72036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schmultiq: Replace direct dequeue call with peek and qdiscdequeuepeeked multiqdequeue takes a packet from a band's child with a direct -dequeue call...

Linux Distros Unpatched Vulnerability : CVE-2026-72280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Drop bogus WARN for write to ZCREL2 It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context, as it is...

Linux Distros Unpatched Vulnerability : CVE-2026-72008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to...

Linux Distros Unpatched Vulnerability : CVE-2026-72394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeedtachvaltorpm function...

Linux Distros Unpatched Vulnerability : CVE-2026-74266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schdualpi2: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever dualpi2 drops packets during peek, it calls...

Linux Distros Unpatched Vulnerability : CVE-2026-72455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 apparmor: move check for aanull file to cover all cases intrdouced a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102111 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT when the fs flips RO inside btrfsrepairiofailure BUG There is a bug report...

Linux Distros Unpatched Vulnerability : CVE-2026-72343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point priv-statsnch is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102113 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix divide-by-zero in OSFWSSMODULO nfosfmatchone computes ctx-window %...

Linux Distros Unpatched Vulnerability : CVE-2026-74411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes...

Linux Distros Unpatched Vulnerability : CVE-2026-72034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fhandle: reject detached mounts in capablewrtmount The recent fhandle RCU fix moved the mount namespace capability check into capablewrtmount, so a non-NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-72194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: add depth limit to indxfindbuffer to prevent stack overflow indxfindbuffer recursively descends the B+ tree index with no depth limit. A crafted NTFS...

Linux Distros Unpatched Vulnerability : CVE-2026-72163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the...

CVE-2026-72035

A flaw was found in the Linux kernel's taprio Time-Aware Priority Shaper scheduler. When the taprio software path processes network packets from a non-work-conserving child queue discipline qdisc, it can incorrectly handle the packet buffer, leading to a null pointer dereference. This issue can...

SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...

CVE-2026-74442

A flaw was found in the Linux kernel's drm/vmwgfx driver. This vulnerability occurs when the vmwvkmsinit function fails to initialize a workqueue, leaving a pointer as NULL. During module unload, the vmwvkmscleanup function attempts to destroy this NULL workqueue, leading to a kernel panic. A loc...