Azure Linux 3.0 Security Update: kernel (CVE-2024-49859)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49859 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomicfile in f2fs...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45015)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45015 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpuencoder's connector...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35810)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35810 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of...

CVE-2026-1035

A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. Thi...

CVE-2026-1035 Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition

A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. Thi...

Keycloak security vulnerabilities

Keycloak is an open-source identity and access management solution developed by Keycloak itself. Keycloak has a security vulnerability, which stems from the TokenManager class’s inability to perform atomic validation and updates during the processing of refresh tokens. This issue may allow...

PT-2026-38936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic can occur during system reboot for certain panels. This issue happens when panels require the transmission of MIPI-DSI commands within their unprepare callback. Because th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004378 advisory. A race condition was found in the Linux kernel's drm/exynos device driver inexynosdrmcrtcatomicdisable function. This can result in a null pointer dereference issue,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003871 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004354 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000906 advisory. A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VMSHARED hugetlbfs...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003123 advisory. A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service BUG...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003395)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003395 advisory. A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service BUG...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002738)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002738 advisory. A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VMSHARED hugetlbfs...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003510 advisory. In the Linux kernel through 4.14.13, the rdscmsgatomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leadin...

SUSE CVE-2025-71074

In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffsepfileopen can race with removal, ending up with file-privatedata pointing to freed object. There is a total count of opened files on functionfs both ep0 and dynamic ones and when it hits...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001726 advisory. There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space. Tenable has...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of interrupt contexts, which could lead to work queues leaking atomic operations, locks, o...

CVE-2025-71132: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPTRT When smc91x.c is built with PREEMPTRT, the following splat occurs in FVPRevC: 13.055000 smc91x LNRO0003:00 eth0: link up, 10Mbps, half-duplex, lpa 0x0000 13.062137 BUG: workqueue leaked...

CVE-2025-71074

CVE-2025-71074 concerns the Linux kernel’s functionfs subsystem, where a race between open and removal can leave a freed object referenced by file->private_data. The root cause is the way ffs->opened is updated; using atomic_dec_and_test() vs atomic_add_return() leads to a window where an o...