CVE-2026-74622

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its DMA...

CVE-2026-74615

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74609

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

kernel: smb/client: handle overlapping allocated ranges in fallocate

A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: kubernetes, loki, kots, minio, commercial-grafana, external-dns, kube-conformance, rancher-support-bundle-kit, cilium-cli, kine, dapr, cert-manager, multicluster-controlplane, kyverno, cilium, hubble, milvus, reports-server, multicluster-controlplane-fips...

CVE-2026-74301

A flaw was found in the Linux kernel's Bluetooth driver. An error in handling Bluetooth packets can cause a memory leak, where a data structure is not properly released. This continuous leakage of memory could potentially lead to system instability or a denial of service...

CVE-2026-49429 Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-72159

A flaw was found in the OCFS2 file system within the Linux kernel. This vulnerability occurs when processing specially crafted file system metadata, specifically non-inline dinodes that report a non-zero file size but zero allocated clusters. An attacker could potentially create a malformed file...

CVE-2026-72236

A flaw was found in the Linux kernel's s390 performance monitoring component s390/perfcpumcf. A userspace-controlled variable was used as an array index without proper speculation barriers. This could allow a local attacker to potentially exploit speculative execution, leading to information...

CVE-2026-28984

creationtimestamp| type| source ---|---|--- 2026-08-18 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:45:19+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101975 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,...

Linux Distros Unpatched Vulnerability : CVE-2026-72090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdnadrmsyncboioctl looks up args-handl...

Linux Distros Unpatched Vulnerability : CVE-2026-72282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cau...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102119 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: arppacketmatch...

Linux Distros Unpatched Vulnerability : CVE-2026-74262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kcm: use WRITEONCE when changing lower socket callbacks kcmattach replaces a live lower TCP socket's skdataready and skwritespace callbacks with KCM handlers, a...

Linux Distros Unpatched Vulnerability : CVE-2026-72442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nfflowip6tunnelproto to us...

Linux Distros Unpatched Vulnerability : CVE-2026-74419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copytouser The amount of data returned to user space should b...

Linux Distros Unpatched Vulnerability : CVE-2026-72183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent ...