CVE-2026-18916 Remote TCP DoS by throttling the TCP receive window

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

EUVD-2026-66134

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

PT-2026-82197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-pcm component where IPC errors during pipeline state changes were not handled correctly. If the firmware state crashed or an IPC timeout occurred, th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104769 advisory. RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098715 advisory. In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrChannels in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098721 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098686 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: fix a potential crash on gsoskb handling SFQ has an assumption of always being...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104797 advisory. RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-80525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098786 advisory. In the Linux kernel, the following vulnerability has been resolved: kprobes: avoid crash when rmmod/insmod after ftrace killed After we hit ftrace is killed by some...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093027 advisory. cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104762 advisory. H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104760 advisory. C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098964 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104770 advisory. Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104803 advisory. Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099002 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packe...

PT-2026-82118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the regmap sdw mbq poll busy function where the system attempts to call the readable reg callback without verifying if it is set. Because this callback is optional,...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

CVE-2026-26448

Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client or a later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference a pointer to a...