CVE-2026-43323

CVE-2026-43323 refers to a Linux kernel scheduler flaw in the fair scheduling component where zero_vruntime tracking could become inconsistent under certain conditions (e.g., frequent yield and multi‑cgroup scenarios). The linked sources describe a specific scenario with two runnable tasks exchan...

CVE-2026-43323 sched/fair: Fix zero_vruntime tracking fix

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zerovruntime tracking fix John reported that stress-ng-yield could make his machine unhappy and managed to bisect it to commit b3d99f43c72b "sched/fair: Fix zerovruntime tracking". The combination of yield and tha...

CVE-2026-43287

In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRMIOCTLMODECREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not accounted to the allocatin...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that DRM attribute blobs are not allocated within memory cgroups, potentially allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between task migration and iteration within cgroups, potentially leading to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007538 advisory. In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more schedfork races Where commit 4ef0c5c6b5ba kernel/sched: Fix schedfork access ...

NewStart CGSL MAIN 6.06 (SP) : kernel Multiple Vulnerabilities (NS-SA-2026-0008)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has kernel packages installed that are affected by multiple vulnerabilities: - A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of memory after cgroups and dmem are released, potentially leading to memory corruption...

[SECURITY] Fedora 42 Update: rust-below-0.9.0-6.fc42

below is an interactive tool to view and record historical system data. It has support for: - information regarding hardware resource utilization - viewing the cgroup hierarchy - cgroup and process information - pressure stall information PSI - record mode to record system data - replay mode to...

MiracleLinux 7 : kernel-3.10.0-1160.66.1.el7 (AXSA:2022-3196:08)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3196:08 advisory. kernel: cgroups v1 releaseagent feature may allow privilege escalation CVE-2022-0492 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000710 advisory. The memory resource controller aka memcg in the Linux kernel allows local users to cause a denial of service deadlock by spawning new processes within a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004279 advisory. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003869 advisory. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000403 advisory. The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after- free because skcd-norefcnt was not considered during a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000523 advisory. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000354 advisory. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack...

SUSE CVE-2022-50855

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...

Linux Distros Unpatched Vulnerability : CVE-2022-50855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the...

EUVD-2022-55843

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...

CVE-2022-50855

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...