DEBIAN-CVE-2026-31661

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dmafreecoherent size dmaallocconsistent may change the size to align it. The new size is saved in alloced. Change the free size to match the allocation size...

CVE-2026-31645

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966xfdmarxalloc creates a page pool but does not destroy it if the subsequent fdmaalloccoherent call fails, leaking the pool. Similarly, lan966xfdmainit frees the coherent DMA...

CVE-2026-31661 wifi: brcmsmac: Fix dma_free_coherent() size

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dmafreecoherent size dmaallocconsistent may change the size to align it. The new size is saved in alloced. Change the free size to match the allocation size...

EUVD-2026-25491

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dioendiowrite ocfs2unlink takes orphan dir inodelock first and then ipallocsem, while in ocfs2dioendiowrite, it acquires these locks in reverse order. This creates an ABBA lock...

CVE-2026-31598

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dioendiowrite ocfs2unlink takes orphan dir inodelock first and then ipallocsem, while in ocfs2dioendiowrite, it acquires these locks in reverse order. This creates an ABBA lock...

PT-2026-34950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the ocfs2 module due to an ABBA lock ordering violation between the ocfs2 unlink and ocfs2 dio end io write functions. The ocfs2 unlink function acquires the orph...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013605 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for allocorderedworkqueue Add check for the return value of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013674 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: fix memory leak in hnsroceallocmr When hnsrocemrenable failed in hnsroceallocmr, mrkey ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013698 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quarkdts: fix error pointer dereference If allocsocdts fails, then we can just...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011032 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013217 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for allocorderedworkqueue Add check for the return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007048 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010925 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in allocwbufs kmemleak reported a sequence of memory leaks, and show them ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013133 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues When running testsockmap...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011134 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quarkdts: fix error pointer dereference If allocsocdts fails, then we can just...

EUVD-2026-23905

KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kissfftndralloc function in kissfftndr.c where the allocation size calculation dimOtherdimReal+2sizeofkissfftscalar overflows signed 32-bit integer arithmetic before being widened to sizet, causing malloc to allocate ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007601 advisory. In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for allocorderedworkqueue Add check for the return value of...

PT-2026-51925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the arena alloc pages function accepts an integer node id and forwards it through the allocation chain without performin...

PT-2026-35334

Integer overflow in libaom internal function img alloc helper can lead to heap buffer overflow. This function can be reached via 3 callers: - Calling aom img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offset...

CVE-2018-25258 RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can craft malicious input in the Language for menus and messages field to trigger a stack-based...