Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000391 advisory. arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000451 advisory. The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. Tenable has extracted the preceding description block...

CVE-2025-68759 wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...

PT-2026-1254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s irqchip/mchp-eic component where an out-of-bounds access can occur in the mchp eic domain alloc function. Specifically, if the irq domain translate...

PT-2026-30648

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A memory corruption issue exists when using deprecated DMABUF IOCTL calls to manage video memory. Recommendations At the moment, there is no information about a...

gcc-toolset-14-binutils security update

2.41-5.1 - Fix a potential illegal memory access when linking a corrupt input file. RHEL-130669...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper boundary checking of the iommummiowrite function in the amd iommu driver, which could lead to...

Oracle Linux 9 : gcc-toolset-14-binutils (ELSA-2026-0052)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0052 advisory. 2.41-5.1 - Fix a potential illegal memory access when linking a corrupt input file. RHEL-130669 Tenable has extracted the preceding description block directly...

CVE-2025-69261

A flaw was found in WasmEdge, a WebAssembly runtime. A multiplication error within the checkAccessBound function can lead to incorrect memory access. This vulnerability allows a remote attacker to trigger a segmentation fault, causing the program to crash and resulting in a Denial of Service DoS...

PT-2026-27700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak exists in the irdma create user ah function within the RDMA/irdma component. The rsvd4 member of the irdma create ah resp structure leaks 4 bytes of stack memory...

PT-2026-8136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's btrfs implementation related to handling inline extents during the send operation. Specifically, the range is hole in parent function does not...

PT-2026-5536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the dma pool created by dma pool create. This leak occurs when dma async device register or of dma controller register fails, specifically in the probe error...

PT-2026-25093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.75 Chromium versions prior to 146.0.7680.75 Description A high-severity out-of-bounds write flaw exists in the Skia graphics engine within Google Chrome and Chromium-based browsers. This vulnerability...

PT-2026-21574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.116 Description A flaw exists in Google Chrome's Tint component on Mac operating systems. This issue allows a remote attacker to perform out of bounds memory access through a specially crafted HTML...

PT-2026-26510

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A flaw exists in the WebGL component of Google Chrome on Android that could allow a remote attacker to potentially escape the sandbox through a specially crafted HTML page. The issue...

PT-2026-8130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ath12k driver related to DMA memory management. Specifically, the issue involves incorrect pointer handling during the freeing of DMA-mapped buffers...

PT-2026-8128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s wifi subsystem, specifically within the ath10k driver, related to the handling of DMA Direct Memory Access mapped buffers. The issue involves incorrec...

PT-2026-8204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Intel-thc-hid driver within the Linux kernel. The issue involves a missing safety check when reading a DMA buffer, potentially leading to a NULL pointer access. This...

PT-2026-26143

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cram decode slice function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value,...

PT-2026-27751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the gve module related to incorrect buffer cleanup within the gve tx clean pending packets function when operating in DQ-QPL mode. This occurs becau...