Security update for util-linux

This update for util-linux fixes the following issues: CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. Several security issues in releases prior to v2.42.2...

SUSE-SU-2026:3813-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues in releases prior to...

Security update for util-linux

This update for util-linux fixes the following issues: CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. Several security issues in releases prior to v2.42.2...

SUSE-SU-2026:3812-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues in releases prior to...

Exploit for CVE-2026-53613

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing...

CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

CVE-2026-58094

A Time-of-check Time-of-use (TOCTOU) race condition exists in the FIOSSHMLPGCNF ioctl(2) operation of the posixshm module in FreeBSD . The handler fails to hold the rangelock when checking if a page size has already been configured for a largepage shared memory object. This allows two concurrent ...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.apache.tomcat:tomcat-util is a Common code shared by multiple Tomcat components. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to a race condition in the setting of permissions for Unix domain sockets. An attacker can gain...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview @better-auth/sso is a SSO plugin for Better Auth Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the verifyDomain route in packages/sso/src/routes/domain-verification.ts and the domain-based assignment logic in...

EUVD-2026-66125

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-77573: Time-of-check Time-of-use (TOCTOU) Race Condition

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component repository URLs can perform server-side request forgery against internal services through DNS rebinding during VCS operations. Weblate...

CVE-2026-47836: Undefined Security Weakness

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-58094: Time-of-check Time-of-use (TOCTOU) Race Condition

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

PT-2026-82231

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 5.0.0 through 5.0.4 Spring Cloud Config versions 4.3.0 through 4.3.4 Spring Cloud Config versions 4.0.0 through 4.2.8 Spring Cloud Config versions 3.1.14 and earlier Description The base directory used by the Sprin...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098772 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfsioctlspaceinfo slotcount TOCTOU which can lead to info-leak btrfsioctlspaceinfo h...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098957 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnethdr in tpacketsnd In tpacketsnd, when PACKETVNETHDR is...

Linux Distros Unpatched Vulnerability : CVE-2026-65183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the...

CVE-2026-74740: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...