CVE-2026-31533

The CVE-2026-31533 entry concerns a Linux kernel net/tls use-after-free in tls_do_encryption() when crypto_aead_encrypt() returns -EBUSY. The underlying issue is double cleanup of encrypt_pending and the scatterlist entry due to distinct cleanup paths (async callback tls_encrypt_done() vs synchro...

SUSE CVE-2026-31468

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfiopcicorefeaturedmabuf ignores its own advice to only use dmabufput after dmabufexport, instead falling through the entire unwind chain. In the unlikely event...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a memory leak in the error path of tlsdoencryption. This leak allows for the reuse of resources...

EUVD-2026-24815

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfiopcicorefeaturedmabuf ignores its own advice to only use dmabufput after dmabufexport, instead falling through the entire unwind chain. In the unlikely event...

CVE-2026-31468

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfiopcicorefeaturedmabuf ignores its own advice to only use dmabufput after dmabufexport, instead falling through the entire unwind chain. In the unlikely event...

CVE-2026-31468

CVE-2026-31468 affects the Linux kernel vfio/pci dma-buf feature. The issue is an error-path handling bug in vfio_pci_core_feature_dma_buf() that can cause an unbalanced refcount and a double free under certain conditions (e.g., file descriptor exhaustion). The documented fix moves the dma_buf_pu...

CVE-2026-31468 vfio/pci: Fix double free in dma-buf feature

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfiopcicorefeaturedmabuf ignores its own advice to only use dmabufput after dmabufexport, instead falling through the entire unwind chain. In the unlikely event...

PT-2026-34373

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfio pci core feature dma buf ignores its own advice to only use dma buf put after dma buf export, instead falling through the entire unwind chain. In the unlike...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of error paths. This vulnerability may lead to an imbalance in reference counts...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013641 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013694 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4xattrinodecreate on an error path There is issue as follows when do...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006994 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpifirmwareprobe In rpifirmwareprobe, if...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006967 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refc...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011381 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's remove...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010997 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpifirmwareprobe In rpifirmwareprobe, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013200 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf-biosplit' In the error path of raid10run, 'conf' need be freed,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011053 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011133 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4xattrinodecreate on an error path There is issue as follows when do...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013050 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40evsirequestirqmsix error path If requestirq in i40evsirequestirqmsix...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010991 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dioinit If deviceregister returns error, the 'dev' and...