CVE-2026-22992 libceph: return the handler error from mon_handle_auth_done()

In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from monhandleauthdone Currently any error from cephauthhandlereplydone is propagated via finishauth but isn't returned from monhandleauthdone. This results in higher layers learning that despite...

OESA-2026-1231 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smpexecutetasksg When executing SMP task failed, the smpexecutetasksg calls deltimer to delete "slowtask-timer". However,...

CVE-2025-3839 Epiphany: insecure external protocol invocation in epiphany

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004878 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thawnoirq hook The following warning is seen with non-console UART...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004876 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvscleanupbatch During the initialization of ipvsconnnetinit, if file...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004857 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsa...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21993)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21993 advisory. - In the Linux kernel, the following vulnerability has been resolved: iscsiibft: Fix UBSAN shift-out-of- bound...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49870)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49870 advisory. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38219)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38219 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: prevent kernel warning due to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47752)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47752 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56657)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56657 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35853)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35853 advisory. - In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memo...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46835)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46835 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix smatch static checker...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47753)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47753 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 statele...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37867)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37867 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47754)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47754 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38051)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38051 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in...

LastPass Warns of Fake Maintenance Messages Targeting Users' Master Passwords

LastPass is alerting users to a new active phishing campaign that's impersonating the password management service, which aims to trick users into giving up their master passwords. The campaign, which began on or around January 19, 2026, involves sending phishing emails claiming upcoming maintenan...

MiracleLinux 8 : gcc-toolset-10-annobin-9.29-1.el8.2, gcc-toolset-10-gcc-10.3.1-1.2.el8 (AXSA:2021-2881:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2881:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...