CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary

In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...

SUSE CVE-2026-74274

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by cxl driver. This means cxl driver always assumes the first p-nrtargets...

PT-2026-82131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...

PT-2026-82198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...

CVE-2026-74751: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...

IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2026 advisory. - In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested...

Linux Distros Unpatched Vulnerability : CVE-2026-74751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098995 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104604 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure...

Linux Distros Unpatched Vulnerability : CVE-2026-80523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access path of X100 RISC-V core, so set the clock flag as critical ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: e2fsprogs (UTSA-2026-061500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061500 advisory. An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a special...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098810 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CTPTPNUM from 1 to 4 to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098685 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in...

PT-2026-82114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firewire OHCI driver where a NULL pointer dereference can occur within the ar context release function. This happens during the error handling path of the driver's...

SUSE CVE-2026-68370

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared usbrequest dum-fiforeq that the "emulated single-request FIFO" fast-path in dummyqueue reuses for small IN transfers: it copies the...

SUSE CVE-2026-74420

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

The vulnerability of the do_secure_storage_access() function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the dosecurestorageaccess function in the arch/s390/mm/fault.c module of the S390 platform support module for the Linux operating system is related to an exception handling error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

CVE-2026-18349

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349

CVE-2026-18349 is an improper protection against voltage and clock glitches vulnerability in the Microchip SAMA5D4 that enables Hardware Fault Injection . The CVSS 4.0 score is 7.3 (HIGH) , with a physical attack vector and high attack complexity , but all impact metrics (confidentiality, integri...