CVE-2026-74420

A flaw was found in the Linux kernel's GPU Shared Virtual Memory SVM subsystem. This vulnerability occurs when attempting to create an SVM range on Virtual Memory Areas VMAs that are not backed by physical page objects. An attacker could exploit this by triggering repeated page retrieval failures...

CVE-2026-49418

When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...

CVE-2026-49418

On FreeBSD, calling msync(MS_INVALIDATE) on a mapping of an unmanaged device object leaves invalidated pages in the pager's page list; a subsequent page fault re-inserts them, corrupting the list and causing a double-free on object destruction. An unprivileged local user with memory-mapped I/O ac...

PT-2026-78323

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.61 Description A crafted .class file containing deeply nested annotations can trigger a segmentation fault, which is a specific type of crash that occurs when a program attempts to access a memory location th...

CVE-2026-72325

A flaw was found in the Linux kernel's performance monitoring unit PMU for AMD processors. When Secure Virtual Machine SVM is toggled on a CPU with active Last Branch Record LBR events, the system incorrectly attempts to enable Branch Sampling BRS on hardware that does not support it. This...

CVE-2026-72395

A flaw was found in the Linux kernel's hwmon pmbus subsystem. A worker designed to batch regulator events can combine multiple distinct hardware fault events into a single bitmask. This combined bitmask is then incorrectly processed by the critical hardware protection function,...

Linux Distros Unpatched Vulnerability : CVE-2026-74274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Fill first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by cx...

Linux Distros Unpatched Vulnerability : CVE-2026-72278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLLWRITE whenever the guest aborts for a write, similar to how a...

Linux Distros Unpatched Vulnerability : CVE-2026-74398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure transitions ifp-state from DAD to POSTDAD via addrconfdadend, which...

MINI-F7P2-FF8M-3HW4

Bulletin has no description...

MINI-VM7M-HXWX-XW52

Bulletin has no description...

Unity Linux 20.1050e / 20.1070e Security Update: lua (UTSA-2025-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000295 advisory. ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099517 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocati...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100723 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: use kmaplocalpage in netvsccopytosendbuf netvsccopytosendbuf copies page buffer entrie...

MINI-48HR-4H8G-GFQV

Bulletin has no description...

SUSE CVE-2026-74526

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit mpi3mrfaultueventemit runs from the fault watchdog and reset paths where host I/O may already be blocked. GFPKERNEL allocations here, both the local kzallocobj and the...

MINI-F8J5-W365-949F

Bulletin has no description...

MINI-MXV5-9RR3-CXJR

Bulletin has no description...

CVE-2026-74520

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopfgroupalloc links each last-page IOPF group into the generic IOPF pending list before invoking the domain fault handler. iommufdfaultiopfhandler also queued an accepted group in the...