CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

PT-2026-82200

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the s390/qeth component where the qeth snmp command and qeth l3 arp query functions allocate a buffer based on a user-supplied length udata len without verifying a low...

CVE-2026-80584: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatalen without checking a lower bound, then set udataoffset to a fixed...

PT-2026-82156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component regarding the minimum size calculation for UVD decode images. The calculation incorrectly uses width instead of pitch, and it fails to reject...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-104807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104807 advisory. Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Tenable has...

MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4, gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2 (AXSA:2026-1666:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1666:01 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104612 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 la...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104764 advisory. Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds vi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098837 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guar...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104772 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and wri...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104773 advisory. Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value...

RHEL 8 : freerdp (RHSA-2026:60173)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60173 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Libevent Heap Buffer Overflow DoS

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104557 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check immbuf-len is a user-controlled...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104617)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104617 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093174 advisory. Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted image to the 1 pngsetsPLT or 2...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104608 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1...

Linux Distros Unpatched Vulnerability : CVE-2026-80584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatale...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104565 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104579 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2ioctlqueryinfo validates the...