2670 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007522 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: fix ltout double free on completion race Always remove linked timeout on iolinktimeoutfn...
Unbreakable Enterprise kernel security update
5.4.17-2136.354.4.1 - Revert 'rds: Drop rds conn in connect worker if not in down state.' Alok Tiwari Orabug: 39200399 5.4.17-2136.354.4 - macvlan: fix possible UAF in macvlanforwardsource Eric Dumazet Orabug: 38887731 CVE-2026-23001 - macvlan: Use 'hash' iterators to simplify code Christophe...
Linux kernel io_uring Heap Buffer Overflow DoS
The vulnerability of the ioqueueiowq function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2026-23473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/poll: fix multishot recv missing EOF on wakeup race When a socket send and shutdown happen back-to-back, both fire wake-ups before the receiver's taskwo...
SUSE CVE-2026-23473
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23473
In the Linux kernel, the following vulnerability has been resolved: iouring/poll: fix multishot recv missing EOF on wakeup race When a socket send and shutdown happen back-to-back, both fire wake-ups before the receiver's taskwork has a chance to run. The first wake gets poll ownership pollrefs=1...
EUVD-2026-18746
In the Linux kernel, the following vulnerability has been resolved: iouring/poll: fix multishot recv missing EOF on wakeup race When a socket send and shutdown happen back-to-back, both fire wake-ups before the receiver's taskwork has a chance to run. The first wake gets poll ownership pollrefs=1...
CVE-2026-23473
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23473
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23473
The CVE-2026-23473 issue affects the Linux kernel io_uring/poll path. A race occurs when a socket send and shutdown() wake up the poll loop back-to-back; the first wake assigns poll ownership (poll_refs=1) and the second increments to 2. io_poll_check_events() calls io_poll_issue(), which perform...
CVE-2026-23473
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
libfuse Use-After-Free / NULL Pointer Dereference
Two memory safety vulnerabilities in libfuse's iouring code path introduced in 3.18.0 have been fixed in libfuse 3.18.2. Only the iouring transport is affected; the traditional /dev/fuse path is not. One is a use-after-free in the iouring session shutdown path. A local user can crash the FUSE...
Security update for glusterfs (important)
openSUSE Security Update: Security update for glusterfs Announcement ID: openSUSE-SU-2026:0099-1 Rating: important References: 1208517 1208519 1210894 1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...
Security update for glusterfs (important)
openSUSE Security Update: Security update for glusterfs Announcement ID: openSUSE-SU-2026:0104-1 Rating: important References: 1208517 1208519 1210894 1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...
Linux kernel io_uring Heap Buffer Overflow DoS
The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-33179
A flaw was found in libfuse. A local user can exploit a NULL pointer dereference and memory leak vulnerability during the setup of the iouring input/output mechanism. This can occur when memory allocation or queue registration fails, leading to the FUSE daemon crashing or resource exhaustion. Thi...
CVE-2026-33150
A flaw was found in libfuse. A use-after-free vulnerability in the iouring subsystem allows a local attacker to potentially execute arbitrary code and crash FUSE Filesystem in Userspace filesystem processes. This occurs when iouring thread creation fails due to resource exhaustion, such as limits...
Linux kernel io_uring Heap Buffer Overflow DoS
The vulnerability of the iogetextargreg function in the iouring module of the Linux kernel’s asynchronous input/output interface is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2026-33179
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...