Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099713)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099713 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

RHEL 9 : glib2 (RHSA-2026:55440)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55440 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

PT-2026-76712

Zephyr's 6LoWPAN IP Header Compression IPHC uncompression code contains an out-of-bounds read in get ihpc inlined size subsys/net/ip/6lo.c. The destination inline size is looked up in da inline size table, which has 13 entries, using an index built from the M, DAC and DAM bits of the received IPH...

ALSA-2026:55440 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer over-read in...

Important: isns-utils

Issue Overview: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. CVE-2026-55995 Affected Packages: isns-utils Note: This advisory is applicable to Amazon Linux 2...

PT-2026-76717

Name of the Vulnerable Software and Affected Versions deepmerge-ts versions prior to 8.0.0 Description The library fails to track visited objects or object pairs during the recursive merging of records. When two input values contain self-references at the same property path, the merge logic...

The vulnerability of the display_timing component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the displaytiming component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/infiniband/sw/siw/siw_qp_rx.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/infiniband/sw/siw/siwqprx.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the driver/iommu/intel/pasid.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/iommu/intel/pasid.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nft_add_set_elem() function in the net/netfilter/nf_tables_api.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hns_roceHW_v2.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hnsroceHWv2.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the mt7996_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver for mediatek’s Linux kernel allows a hacker to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the mt7996macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...

The vulnerability of the fs/xfs/libxfs/xfs_attr_leaf.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/xfs/libxfs/xfsattrleaf.c component in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the fs/xfs/libxfs/xfs_attr_leaf.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/xfs/libxfs/xfsattrleaf.c component in the Linux operating system is related to a countable amount of value loss. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the octep_device_setup() function in the drivers/net/ethernet/marvell/octeon_ep/octep_main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the octepdevicesetup function in the drivers/net/ethernet/marvell/octeonep/octepmain.c file of the Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system...

PT-2026-73412

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

ROS-20260817-73-0217

The vulnerability in Ruby is related to uncontrolled resource consumption due to filtering and reducing data to unsafe values during the processing of HTTP headers. Exploiting this vulnerability can allow an attacker to cause service failures, provided that the default configurations of...

RockyLinux 9 : glib2 (RLSA-2026:55440)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55440 advisory. glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal CVE-2026-58010 glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetymd vi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100740 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: fix missing expect put in obj eval nftctexpectobjeval allocates an expectation...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099698 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...