CVE-2026-21862

RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: getconditionvalues trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy...

CVE-2025-66480

Wildfire IM is an instant messaging and real-time audio/video solution. Prior to 1.4.3, a critical vulnerability exists in the im-server component related to the file upload functionality found in com.xiaoleilu.loServer.action.UploadFileAction. The application exposes an endpoint /fs that handles...

SUSE-SU-2026:20564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

SUSE CVE-2025-71159

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfsgetorcreatedelayednode Previously, btrfsgetorcreatedelayednode set the delayednode's refcount before acquiring the root-delayednodes lock. Commit e8513c012de7 "btrfs: implement reftracker...

CVE-2025-71159 btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfsgetorcreatedelayednode Previously, btrfsgetorcreatedelayednode set the delayednode's refcount before acquiring the root-delayednodes lock. Commit e8513c012de7 "btrfs: implement reftracker...

MiracleLinux 9 : runc-1.1.12-2.el9 (AXSA:2024-7794:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7794:03 advisory. golang: io/fs: stack exhaustion in Glob CVE-2022-30630 golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30631 golang: path/filepath:...

MiracleLinux 8 : container-tools:4.0 (AXSA:2023-5976:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5976:02 advisory. golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001486 advisory. In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004264 advisory. Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging imprope...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004017 advisory. Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging imprope...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000841 advisory. Use-after-free vulnerability in the shmemremountfs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004275 advisory. A memory leak in the kernelreadfile function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service memory consumption by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004126 advisory. A memory leak in the kernelreadfile function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service memory consumption by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004329 advisory. In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000596 advisory. The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, whi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003283 advisory. Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service NULL pointer dereference or possibly gai...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002713 advisory. The sanitycheckckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001377 advisory. In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with...

CVE-2025-71065

The CVE-2025-71065 entry concerns a deadlock in the Linux kernel’s f2fs subsystem. The provided details describe a four-lock deadlock chain involving: Lock A (fs_reclaim), Lock B (sb_start_intwrite), Lock C (f2fs_lock_op), and Lock D (f2fs_down_write). The root-cause trace shows kswapd and other ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: check p-vecbuf for NULL When the PAGEMAPSCAN ioctl is invoked with veclen = 0 and results in pagemapscanbackoutrange, the kernel panics due to a null-ptr-deref. 44.936808 Oops: general protection fault, likely fo...