29825 matches found
CVE-2026-72159
A flaw was found in the OCFS2 file system within the Linux kernel. This vulnerability occurs when processing specially crafted file system metadata, specifically non-inline dinodes that report a non-zero file size but zero allocated clusters. An attacker could potentially create a malformed file...
CVE-2026-72236
A flaw was found in the Linux kernel's s390 performance monitoring component s390/perfcpumcf. A userspace-controlled variable was used as an array index without proper speculation barriers. This could allow a local attacker to potentially exploit speculative execution, leading to information...
CVE-2026-28984
creationtimestamp| type| source ---|---|--- 2026-08-18 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:45:19+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102122)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102122 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 In sndusbgetaudioformatuac3,...
Linux Distros Unpatched Vulnerability : CVE-2026-72282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cau...
Linux Distros Unpatched Vulnerability : CVE-2026-74321
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix invalid pointer dereference in btrfsrundelayedrefs In the beginning of the loop, we try to obtain a locked delayed ref head, if 'lockedref' is...
Linux Distros Unpatched Vulnerability : CVE-2026-72368
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: Fix double unlock in nomemdalloc error path When startcreating fails and returns -ENOMEM, it has already released the parent directory lock in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101975 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102119)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102119 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: arppacketmatch...
Linux Distros Unpatched Vulnerability : CVE-2026-74419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Adjust size for copytouser The amount of data returned to user space should be limited by the buffer size provided by the application. If the...
Linux Distros Unpatched Vulnerability : CVE-2026-72442
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nfflowip6tunnelproto to use pskbmaypull instead of skbheaderpointer to ensure the outer IPv6...
Linux Distros Unpatched Vulnerability : CVE-2026-72090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Use caller client for debug BO sync amdxdnadrmsyncboioctl looks up args-handle in the ioctl caller's drmfile. For SYNCDIRECTFROMDEVICE, it then...
Linux Distros Unpatched Vulnerability : CVE-2026-72183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock...
Linux Distros Unpatched Vulnerability : CVE-2026-74262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kcm: use WRITEONCE when changing lower socket callbacks kcmattach replaces a live lower TCP socket's skdataready and skwritespace callbacks with KCM handlers, a...
Linux Distros Unpatched Vulnerability : CVE-2026-72229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it...
kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle
A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100748)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100748 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100543)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100543 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks sctpgetsockoptpeerauthchunks...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100300 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. T...
The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the hns3 component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...