PT-2026-1559

Name of the Vulnerable Software and Affected Versions OpenFlagr versions prior to and including 1.1.18 Description The software contains an authentication bypass issue in the HTTP middleware. Improper path normalization within the whitelist logic allows crafted requests to bypass authentication,...

SecLeak

SecLeak Assessment This repository contains the s...

AZL-73394 CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

UBUNTU-CVE-2025-68764

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

CVE-2025-68764 NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

Linux Distros Unpatched Vulnerability : CVE-2025-68764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock moun...

PT-2026-6120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the pNFS parallel Network File System implementation. Specifically, a deadlock can occur when returning a delegation during an open operation...

PT-2026-6136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rxrpc subsystem related to the handling of recvmsg calls. Specifically, an unconditional requeue of calls can occur if MSG DONTWAIT is specifi...

PT-2026-26580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the io uring subsystem. Specifically, a condition exists where, if DEFER TASKRUN and SETUP TASKRUN are utilized concurrently with ring resizing,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992910)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992910 advisory. In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993177 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to set both...

UBUNTU-CVE-2023-54268

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fillpool syzbot is reporting a lockdep warning in fillpool because the allocation from debugobjects is using GFPATOMIC, which is GFPHIGH | GFPKSWAPDRECLAIM and therefore tries to wake up...

CVE-2023-54268 debugobjects: Don't wake up kswapd from fill_pool()

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fillpool syzbot is reporting a lockdep warning in fillpool because the allocation from debugobjects is using GFPATOMIC, which is GFPHIGH | GFPKSWAPDRECLAIM and therefore tries to wake up...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of the GFP flag for fillpool in debugobjects, which could lead to a deadlock...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992633 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to set both...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992690 advisory. In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992437 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown lpuartdmashutdown tears...

CVE-2025-68356

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function newinode returns a new inode with inode-imapping-gfpmask set to GFPHIGHUSERMOVABLE. This value includes the GFPFS flag, so allocations in that address space can recurse into...

CVE-2022-50699

In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...

SUSE CVE-2022-50697

In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of deltimersync must prevent restarting of the timer, If we have no this synchronization, there is a small probability that the cancellation will not be...