CVE-2026-72229

A flaw was found in the batman-adv component of the Linux kernel. When a mesh interface is registered, an untagged VLAN object is created. If the network device netdev registration fails due to a veto, the cleanup process does not properly free this object. This can lead to a memory leak,...

CVE-2026-72212

A flaw was found in the Linux kernel's memory hotplug subsystem. An error in the memory cleanup process, specifically when memory is added and then an issue occurs during device creation, can lead to incorrect handling of memory pages. This vulnerability can result in memory corruption, potential...

CVE-2026-72426

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The cleanfuncstate function, which manages stack slot cleanup, incorrectly clears metadata for pointer spills. This allows a subsequent read from a partially live stack slot to bypass crucial non-scalar register-fill...

ROS-20260818-73-0024

The vulnerability in gpac is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-77251

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.0.0 through 4.14.5 Description An issue exists where authenticated cluster peers can delete arbitrary directory contents within the installation path writable by the wazuh user. This occurs because the system fails to validate...

Linux Distros Unpatched Vulnerability : CVE-2026-72406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevic...

Linux Distros Unpatched Vulnerability : CVE-2026-72145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in memwrite In memwrite, the temporary array...

Linux Distros Unpatched Vulnerability : CVE-2026-72344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5laggetdevseq will return error when the peer isn't in the LAG or when no device is marked ...

CVE-2026-74044: Improper Limitation of a Pathname to a Restricted Directory

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...

Linux Distros Unpatched Vulnerability : CVE-2026-72259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no...

CVE-2026-72109

A flaw was found in the Linux kernel's sparx5 network driver. An improper cleanup during initialization failure can leave a switchdev blocking notifier registered. This issue could lead to resource exhaustion or system instability, potentially resulting in a Denial of Service DoS condition...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100517 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100352 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec ocfs2: fix xattr array entry...

CVE-2026-9693: Incomplete Cleanup

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100531 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099743 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenetputtxcb The writeptr points to the next open txcb. We wa...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100309 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are freed afte...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099702 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

Incomplete Cleanup

Overview @fastify/multipart is a Multipart plugin for Fastify Affected versions of this package are vulnerable to Incomplete Cleanup due to incomplete temporary-file handling in saveRequestFiles in index.js. An attacker can exhaust disk space by sending a multipart request that completes one file...

Incomplete Cleanup

Overview @fastify/multipart is a Multipart plugin for Fastify Affected versions of this package are vulnerable to Incomplete Cleanup due to the saveRequestFiles multipart upload handling in index.js. An attacker can hang a request and leave temporary files behind by sending a file part that excee...