Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004949 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings The perf mmap code is careful about mmap'ing the...

PT-2026-4808

Name of the Vulnerable Software and Affected Versions Omada Controllers affected versions not specified Description An IDOR Insecure Direct Object Reference issue exists in Omada Controllers. An attacker with Administrator permissions can manipulate requests and potentially hijack the Owner...

MINI-CC4V-J8MF-PP22

Bulletin has no description...

AZL-78443 CVE-2025-71163 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface...

UBUNTU-CVE-2025-71163

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface...

UBUNTU-CVE-2026-22997

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...

CVE-2026-22997

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...

CVE-2026-22997 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...

CVE-2025-71163 dmaengine: idxd: fix device leaks on compat bind and unbind

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface...

CVE-2025-71163 dmaengine: idxd: fix device leaks on compat bind and unbind

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface...

MINI-F4VF-VVMQ-PWWJ

Bulletin has no description...

MINI-VMM6-8GH8-63QW

Bulletin has no description...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by a session reference count leak, which may prevent network devices from being released...

GHSA-H4RF-624J-GJ33

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:38+00:00| seen| https://gist.github.com/alon710/37fabe1fa2ec64ffc9106dcc65d66121 2026-01-24 22:42:01+00:00| seen| https://gist.github.com/alon710/0eade6150525a9133af55eb8ec5fe812...

GHSA-7C2F-R6GC-H92H

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:51+00:00| seen| https://gist.github.com/alon710/3bf66b845acf7d04cc3340cafc7cdb20 2026-01-24 22:27:43+00:00| seen| https://gist.github.com/alon710/53995fe8099ea4123a16bf135e515d18 2026-01-24 22:27:45+00:00| seen|...

GHSA-4XH5-JCJ2-CH8Q

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:57+00:00| seen| https://gist.github.com/alon710/a8f00d02af9bbef05b5cf8f64b7e8a02 2026-01-24 22:19:08+00:00| seen| https://gist.github.com/alon710/b7bde8da7ddb5ddf55e3c6550ccdb464 2026-01-24 22:19:11+00:00| seen|...

Exploit for CVE-2026-24061

No d...

ECHO-ADDC-A9AA-706B

Bulletin has no description...

EUVD-2026-4542

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdkpublicaction AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user...

EUVD-2026-4559

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing or incorrect nonce validation on the...