14762 matches found
CVE-2026-0990
Vulnerability: CVE-2026-0990 affects libxml2. An uncontrolled recursion bug in xmlCatalogXMLResolveURI is triggered when a delegate URI entry references itself, allowing a remote attacker to craft an XML catalog that causes infinite recursion and stack exhaustion, resulting in DoS via application...
SUSE CVE-2025-68814
In the Linux kernel, the following vulnerability has been resolved: iouring: fix filename leak in ioopenatprep ioopenatprep allocates a struct filename using getname. However, for the condition of the file being installed in the fixed file table as well as having OCLOEXEC flag set, the function...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002537 advisory. The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002682)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002682 advisory. Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vecto...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001893)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001893 advisory. arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the strict page permissions protection mechanism and modify the system-call table...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002478)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002478 advisory. The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002202)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002202 advisory. Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002128)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002128 advisory. The tcpreadsock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001996)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001996 advisory. udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003454)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003454 advisory. Race condition in the ionioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial o...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002365 advisory. The pmdnoneortranshugeorclearbad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003174 advisory. The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002222)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002222 advisory. arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the strict page permissions protection mechanism and modify the system-call table...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002309)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002309 advisory. The rdsibladdrcheck function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service NULL pointer dereference and system...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002780 advisory. Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service BUG or possibly have unspecified other...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002659)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002659 advisory. The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003005)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003005 advisory. The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002500)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002500 advisory. The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, whi...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002123)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002123 advisory. The copycreds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003225)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003225 advisory. The x86/fpu Floating Point Unit subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correct...