SUSE CVE-2026-48551

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling unauthenticated attackers to run command...

SUSE-SU-2026:23187-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-55199: pre-authenticati...

SUSE CVE-2026-68150

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount exclusively before calling the callback and releases it afterwards. Howeve...

CVE-2026-72361

A flaw was found in the Linux kernel's drm/xe/hwengine component. An error handling path in the hwengineinit function attempts to free a Buffer Object BO that is already managed by the device resource management devm system. This redundant free operation results in a double-free vulnerability. A...

CVE-2026-72015

A flaw was found in the Linux kernel's fs/resctrl component. A double-free vulnerability occurs when a pseudo-locked group's Resource Monitoring ID RMID is freed upon creation and then again during unmount operations by the rmdirallsub function. This double-free can lead to memory corruption,...

CVE-2026-74519

A flaw was found in the Linux kernel. An issue within the pinctrl subsystem's device tree handling could lead to a double-free vulnerability. This occurs when an error path during device binding attempts to free uninitialized memory, potentially allowing a local attacker to trigger a system crash...

CVE-2026-74456

A flaw was found in the Linux kernel's Controller Area Network CAN Universal Serial Bus USB driver. This vulnerability, a double free, occurs when a USB request block URB submission fails, causing the system to attempt to release the same memory twice. This could allow a local attacker to...

CVE-2026-72220

A flaw was found in the Linux kernel's sunrpc component. When a worker thread processes a new request and encounters an early error, a stale release hook can be re-triggered against previously used data. This can lead to a double-free or use-after-free vulnerability, potentially allowing an...

openssl: Double-free When Checking OCSP Stapled Response

A flaw was found in OpenSSL. A malicious server can exploit the TLS Online Certificate Status Protocol OCSP stapling feature by sending a specially crafted response. This can trigger a double-free vulnerability in the client's certificate verification process, potentially leading to a Denial of...

Exploit for CVE-2026-68138

CVE-2026-68138 — Linux kernel net/sched qdisc rate-table UAF t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100297 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099715 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100517 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099774 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100334 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100697 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100318 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-100781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100781 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100567)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100567 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100293 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...