CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

BIT-HAPROXY-2026-26080

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...

Off-by-one Error

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Off-by-one Error in chain-rule handling due to the rule-skipping logic in java/org/apache/catalina/valves/rewrite/RewriteValve.java...

Improper Validation of Unsafe Equivalence in Input

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the HTTP/2 request handling. An attacker can bypass strict SNI validation by...

Linux Distros Unpatched Vulnerability : CVE-2026-74741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098978 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Make insnrwemulatebits do insn-n samples The insnrwemulatebits function is used as a...

Linux Distros Unpatched Vulnerability : CVE-2026-80560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clea...

Linux Distros Unpatched Vulnerability : CVE-2026-80538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: propagate errors from xfsrtginodeload xfsrtginodeensure treats every xfsrtginodeload error other than -ENOENT as success. This can leave the realtime group...

PT-2026-81929

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this...

PT-2026-82154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs rtginode ensure function incorrectly handles errors from xfs rtginode load. Specifically, it treats all errors except -ENOENT as...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

PT-2026-82114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firewire OHCI driver where a NULL pointer dereference can occur within the ar context release function. This happens during the error handling path of the driver's...

PT-2026-82181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto qce component where the error path in the devm qce register algs function is handled incorrectly. If the ops-register algs function fails, the system...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098868 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the...

PT-2026-82164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the s390/vfio ccw component. The io mutex was originally intended to serialize io regions but became associated with I/O operations due to their close...

MiracleLinux 9 : java-25-openjdk-25.0.4.0.7-1.1.el9.ML.1 (AXSA:2026-1651:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1651:08 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: isula-build (UTSA-2026-093146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093146 advisory. isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processin...