PT-2026-82202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remote peer can send a malformed Data Sequence Signal DSS with an incorrect size, followed by another DSS or Multipath TCP MPTCP Control MPC and Data. This sequence causes the first...

CVE-2026-80586: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098749 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098743 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSENOTIFYRETRIEVE to uptodate folios FUSENOTIFYRETRIEVE must be limited to uptodate...

Linux Distros Unpatched Vulnerability : CVE-2026-80586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. I...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: sh: rz-dmac – Move the interrupt request after everything is set up. Once an interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is only...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102038 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSENOTIFYRETRIEVE to uptodate folios FUSENOTIFYRETRIEVE must be limited to uptodate...

CVE-2026-49425 Kernel stack disclosure in 32-bit compatibility support

The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...

CVE-2026-72481

A flaw was found in the Linux kernel's iio: magnetometer: ak8975 driver. This vulnerability occurs when the i2csmbusreadi2cblockdataoremulated function returns fewer bytes than expected, leaving uninitialized data in a buffer. A local attacker with access to IIO Industrial Input/Output buffers...

JLSEC-2026-1334

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

JLSEC-2026-1337

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

MINI-8R67-FP44-C6FM

Bulletin has no description...

UBUNTU-CVE-2026-72168

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

CVE-2026-72146

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...

CVE-2026-72168

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

CVE-2026-72236

CVE-2026-72236 concerns the Linux kernel: on s390 architecture, in the perf_cpum_cf path, __hw_perf_event_init() was missing an array_index_nospec() barrier. The ev variable, controlled by userspace via event->attr.config, could be used as an array index after bounds checks without speculative...

CVE-2026-72168

In the Linux kernel vulnerability CVE-2026-72168, the issue lies in the mtd: maps: vmu-flash path where memcard structs could access uninitialized data due to the use of kmalloc_obj()/kmalloc_objs(). The fix changes memory allocation to kzalloc_obj()/kzalloc_objs(), mitigating the fault seen duri...

CVE-2026-72168 mtd: maps: vmu-flash: fix fault in unaligned fixup

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

CVE-2026-72168: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

PT-2026-72356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmu-flash maps of the mtd module where the use of kmalloc obj and kmalloc objs to allocate memcard structs allows access to uninitialized data. This leads to a...