Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104597 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitsetsize overflow on 32bit machines Commit c20e36b7631d dm log: fix out-of-bounds...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098857 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

CVE-2026-13478

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

CVE-2026-13478 Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

CVE-2026-13478

CVE-2026-13478 is an out-of-bounds read in the Zephyr RTOS ext2 filesystem driver. During mount, ext2_init_fs() passes the superblock's s_blocks_count (unbounded) to ext2_bitmap_count_set(), which then reads up to ~512 MB past the single block-size bitmap buffer when a crafted image specifies an ...

EUVD-2026-65599

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

CVE-2026-13478 Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

PT-2026-81376

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2 init fs subsys/fs/ext2/ext2 impl.c by passing fs blocks = s blocks count - s first data block to ext2 bitmap count set. That helper subsys/fs/ext2/ext2 bitmap.c treats its argument as a number of bits and reads one bitma...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Failure to free the BPID bitmap during setup. The nixsetupbpids function allocates bp-bpids using rvuallocbitmap, which utilizes a plain kcalloc. If any of the allocations performed by devmkcalloc for the BPID...

SUSE CVE-2026-72186

In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...

CVE-2026-69159

A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a...

CVE-2026-72050

A flaw was found in the octeontx2-af component of the Linux kernel. During the setup of BPID Back Pressure ID mapping arrays, if memory allocation fails, the BPID bitmap is not properly freed. This can lead to a memory leak, potentially impacting system stability or performance...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100554 advisory. In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099956 advisory. In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations...

SUSE CVE-2026-74448

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...

CVE-2026-74554 wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing it with dppeer-peerid. That is wrong: dppeer-peerid for an MLO peer...

CVE-2026-72369

In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minixchecksuperblock uses minixblocksneeded to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...

CVE-2026-72050

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

CVE-2026-72050

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

UBUNTU-CVE-2026-72202

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluster count, sets NVolFreeClusterKnown, and wakes vol-freewaitq. If that...