Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143077 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142727 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...

SUSE CVE-2026-74662

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

SUSE CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

AZL-97740 CVE-2026-74739 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

CVE-2026-74739

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

PT-2026-82119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read occurs in the tc cls bind class function. This happens because u32 bind class unconditionally casts a passed fh to tc u knode and accesses &n-res. When fh is...

CVE-2026-74662

A flaw was found in the Linux kernel's internet fragmentation inet: frags code. A race condition exists where the fragment queue timer can be activated before the queue is properly registered. This premature timer activation can lead to an inconsistent state, resulting in a stale hash node. This...

CVE-2026-74662

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

UBUNTU-CVE-2026-74662

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

CVE-2026-74662 inet: frags: publish queues before arming timer

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

CVE-2026-74662 inet: frags: publish queues before arming timer

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

CVE-2026-74662

CVE-2026-74662 is a race condition in the Linux kernel 's inet: frags (IP fragmentation) subsystem. In inet_frag_create(), the fragment queue timer is armed before the queue is inserted into the fqdir rhashtable. When the namespace fragment timeout is zero or negative, the timer can fire before t...

Linux Distros Unpatched Vulnerability : CVE-2026-74662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=4666342319128576 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6033759330959360 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6078035170492416 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

PT-2023-35780 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the ucl hash func and occurs during the kh resize ucl hash node and kh put ucl...

PT-2022-37181

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including kh resize ucl hash node, kh put ucl hash...

PT-2021-27946

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including kh resize ucl hash node, kh put ucl hash...