The vulnerability of the fs/ocfs2 component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the fs/ocfs2 component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __graph_get_type() function in the sound/soc/generic/audio-graph-card2.c module allows a hacker to trigger a service failure in Linux operating system-based SoC audio kernels.

The vulnerability of the graphgettype function in the sound/soc/generic/audio-graph-card2.c module of the Linux operating system’s sound support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005605 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...

EUVD-2026-9436

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

CVE-2026-20049

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

CVE-2026-20049

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

CVE-2026-20049

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

CVE-2026-20049

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IPsec Denial of Service Vulnerability

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

RUSTSEC-2026-0076 Panic in Signature Hint Decoding During Verification

During ML-DSA verification the serialized hint values are decoded as specified in algorithm 22 HintBitUnpack of FIPS 204, subsection 7.1. The algorithm requires that the cumulative hint counters per row of the hint vector are strictly increasing and below a maximum value which depends on the choi...

Panic in Signature Hint Decoding During Verification

During ML-DSA verification the serialized hint values are decoded as specified in algorithm 22 HintBitUnpack of FIPS 204, subsection 7.1. The algorithm requires that the cumulative hint counters per row of the hint vector are strictly increasing and below a maximum value which depends on the choi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005725 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...

PT-2026-22977

A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to cause...

The vulnerability of the `pnfs_mark_layout_stateid_invalid()` function in the `fs/nfs/pnfs.c` module, which is part of the NFS client support in Linux kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pnfsmarklayoutstateidinvalid function in the fs/nfs/pnfs.c module relates to errors during link counters updates in Linux kernel-based NFS client support. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005694 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron pmruntimegetsync will increment pm...

CVE-2026-27622

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector totalsizes for attacker-controlled large counts across many parts,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005747 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev Do not assing the Linux device to struct...

CVE-2026-3337 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

The vulnerability of the rcu_assign_sk_user_data_nocopy() macro definition in the include/net/sock.h file, which is part of the networking function support in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the rcuassignskuserdatanocopy macro definition in the include/net/sock.h file, which is part of the Linux kernel’s networking support functions, is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the btrfs DropExtents() function in the fs/btrfs/file.c file of the file system in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfs DropExtents function in the fs/btrfs/file.c file of the btrfs file system in Linux kernels is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...