Linux Distros Unpatched Vulnerability : CVE-2026-89998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid dereference of sblvbptr I encounter issues when placing an lkbsb on the stack and having the sblvbptr field point to a dangling pointer, without using DLMLKFVALBLK. This will cause a crash with the following...

Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107305 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when...

[slackware-security] xz

New xz packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xz-5.8.4-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: liblzma: lzmaalonedecoder, lzmalzipdecoder, lzmaautodecoder,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053437 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

SUSE CVE-2026-72358

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

SUSE CVE-2026-72146

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001433 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

CVE-2026-80645

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid...

SUSE CVE-2026-72480

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098675 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098745 advisory. In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrupt delay...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098769 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr fiel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer-plugins-good (UTSA-2026-093155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093155 advisory. The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of...

CVE-2026-59183

A flaw was found in OpenEXR. An integer overflow vulnerability exists when decoding a specially crafted deep tiled EXR image file. This overflow can lead to an invalid memory pointer, causing applications that process these files to crash. This issue results in a denial of service. Mitigation...

TencentOS Server 4: glibc (TSSA-2026:0850)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: sh: rz-dmac – Move the interrupt request after everything is set up. Once an interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is only...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fixed an out-of-bounds channel lookup in event handling. amseventtochannel may return a pointer that points beyond the end of dev-channels when no matching scanindex is found. This can lead to invalid memory...

SUSE CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...