Linux Distros Unpatched Vulnerability : CVE-2026-72406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevic...

Linux Distros Unpatched Vulnerability : CVE-2026-72344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5laggetdevseq will return error when the peer isn't in the LAG or when no device is marked ...

CVE-2026-74044: Improper Limitation of a Pathname to a Restricted Directory

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...

CVE-2026-72109

A flaw was found in the Linux kernel's sparx5 network driver. An improper cleanup during initialization failure can leave a switchdev blocking notifier registered. This issue could lead to resource exhaustion or system instability, potentially resulting in a Denial of Service DoS condition...

CVE-2026-9693: Incomplete Cleanup

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100531 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100517 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100309 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are freed afte...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100352 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec ocfs2: fix xattr array entry...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099702 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099743 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenetputtxcb The writeptr points to the next open txcb. We wa...

Incomplete Cleanup

Overview @fastify/multipart is a Multipart plugin for Fastify Affected versions of this package are vulnerable to Incomplete Cleanup due to incomplete temporary-file handling in saveRequestFiles in index.js. An attacker can exhaust disk space by sending a multipart request that completes one file...

Incomplete Cleanup

Overview @fastify/multipart is a Multipart plugin for Fastify Affected versions of this package are vulnerable to Incomplete Cleanup due to the saveRequestFiles multipart upload handling in index.js. An attacker can hang a request and leave temporary files behind by sending a file part that excee...

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

UBUNTU-CVE-2026-74554

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing it with dppeer-peerid. That is wrong: dppeer-peerid for an MLO peer...

CVE-2026-74554

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing it with dppeer-peerid. That is wrong: dppeer-peerid for an MLO peer...

CVE-2026-74505

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...

EUVD-2026-59688

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-74495 igbvf: Fix leak in TX DMA error cleanup

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-74442 drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...