Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142530 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix a...

SUSE CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...

CLSA-2024-1727817159 Fix of 73 CVEs

Ubuntu: 4.15.0-237.248 CVE-url: https://ubuntu.com/security/CVE-2024-26752 - l2tp: pass correct message length to ip6appenddata CVE-url: https://ubuntu.com/security/CVE-2021-47188 - scsi: ufs: core: Improve SCSI abort handling CVE-url: https://ubuntu.com/security/CVE-2024-26677 - rxrpc: Fix delay...

Atlassian Confluence 7.13.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104508)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104508 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local use...

CVE-2026-80353

A flaw was found in Apache Tomcat. A local attacker can gain unauthorized access to Unix domain communication sockets due to a time-of-check to time-of-use TOCTOU race condition in the APR/Native connector. When the connector initializes a socket, a brief timing window exists before restrictive...

CVE-2026-93216

A flaw was found in the Linux kernel. A Time-of-check to time-of-use TOCTOU vulnerability exists in the printpageownermemcg function, where page-memcgdata is read multiple times without proper locking. If a memory page is concurrently freed and reallocated between these reads, it can trigger...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the process of creating unix domain sockets for the APR/Native connector. An attacker can gain unauthorized...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.apache.tomcat:tomcat-util is a Common code shared by multiple Tomcat components. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the process of creating unix domain sockets for the APR/Native connector. An attacker can gain...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the stale-lock-breaking logic in trybreakexpiredlock and trybreakstalelock, where a race condition allows an attacker with write access to the lock directory to replace a held lock fil...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via ReadWriteLock cleanup logic in readwrite.py, which removes a randomized .filelock- private hard-link directory during sweep operations. A local attacker with rename access in a...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the strict lock implementation in strict.py and related soft read-write storage code, where claim directories are created without being restricted to the owning account. A local attack...

gvfs: gvfs-admin socket ownership race permits local root

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-18477 DESCRIPTION: A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a...

gvfs: gvfs-admin socket ownership race permits local root

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check...

gvfs: gvfs-admin socket ownership race permits local root

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check...

DEBIAN-CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...

CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...

UBUNTU-CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...

CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...

CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the sam...