47395 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004240)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004240 advisory. A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disab...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001045)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001045 advisory. The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000988)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000988 advisory. The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the...
CVE-2026-22918
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...
CVE-2026-22918
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...
CVE-2026-22918
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...
perf/x86/amd: Check event before enable to avoid GPF
...
CVE-2025-68800
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrummr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex instead of RTNL to protect the multicast route list, so that it will not change while the driver periodically traverse...
CVE-2025-68798
A race condition flaw was found in the Linux kernel's AMD performance monitoring unit PMU code. A subtle timing window exists between NMI-triggered throttling which clears an event pointer and amdpmuenableall which dereferences it. This can result in a NULL pointer dereference and kernel crash on...
SUSE CVE-2025-68798
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc-eventsidx can become NULL in a subtle race condition with NMI-throttle-x86pmustop. Check event for NULL in amdpmuenableall before enable to avoid a GPF. Th...
PT-2026-2999
Name of the Vulnerable Software and Affected Versions affected versions not specified Description An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, potentially leading to the extraction of...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002168)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002168 advisory. Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001909)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001909 advisory. The doremount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNTLOCKREADONLY bit across a remount of a bind mount, which allows...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001946)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001946 advisory. The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to...
XWiki Full Calendar Macro Operational Data Access
The vulnerability of the Full Calendar Macro extension of the XWiki collaborative web application platform is related to insufficient protection of operational data during the processing of the JSONService.xml page. Exploiting this vulnerability could allow an attacker to gain unauthorized access...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002563)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002563 advisory. The acpinsterminate function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002767 advisory. The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism, which allows local users to read or write to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002340)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002340 advisory. The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003443)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003443 advisory. The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism, which allows local users to read or write to...