PT-2026-37400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel due to a reference count imbalance. The issue occurs within the xfrm migrate policy find function, which performs a double call to the xfrm pol...

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version 5.2.6-0 Update translation strings uyuni-tools: Version 5.2.5-0 Remove migrate command Remove template script from mgradm: use the one in the image Split the TFTP server into a separate container Explicitly start proxy pods after operation...

SUSE-SU-2026:20838-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migratefolio in gfs2rgrp,metaaops bsc1249590. - CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966. -...

The vulnerability in the `intel_context_migrate_copy()` function of the `drivers/gpu/drm/i915/gt/intel_migrate.c` driver file of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelcontextmigratecopy function in the drivers/gpu/drm/i915/gt/intelmigrate.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the xe_migrate_access_memory() function in the drivers/gpu/drm/xe/xe_migrate.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xemigrateaccessmemory function in the drivers/gpu/drm/xe/xemigrate.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005523 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in...

The vulnerability of the migrate_device_finalize() function in the mm/migrate_device.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the migratedevicefinalize function in the mm/migratedevice.c file of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: prometheus, syft-fips, rancher-webhook, rekor, vitess, jobset-fips, coredns-fips, kubernetes-csi-external-provisioner, gatekeeper-fips, restic-fips, tkn, cass-operator, trivy, aws-ebs-csi-driver, onepassword-operator, ory-kratos, traefik, ansible-operator, volsync,...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: trivy, docker, k3s, dagger, temporal, azure-service-operator, octo-sts, falcoctl, azcopy, ratify, ferretdb, src, cosign, percona-server-mongodb-operator, restic, pulumi-kubernetes-operator, datadog-operator, kubescape-operator, thanos, tkn, bank-vaults, spire-server,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: trivy, docker, k3s, dagger, temporal, azure-service-operator, octo-sts, falcoctl, azcopy, ratify, ferretdb, src, cosign, percona-server-mongodb-operator, restic, pulumi-kubernetes-operator, datadog-operator, kubescape-operator, thanos, tkn, bank-vaults, spire-server,...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.1 Release.

Red Hat OpenShift Dev Spaces 3.26.1 has been released. 3.26.1 includes CVE fixes for CVE-2025-15467, CVE-2025-6176, CVE-2026-1761, CVE-2026-0719, CVE-2025-61732, and CVE-2025-61726. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams an...

cms-security-poc

CVE-2026-31266 - Craft CMS Missing Authorization CVE Infor...

CVE-2026-23097

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

CVE-2026-23097

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

CVE-2026-23097 migrate: correct lock ordering for hugetlb file folios

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

CVE-2026-23097

CVE-2026-23097: Linux kernel migrate path deadlock due to incorrect lock ordering between hugetlb folio_lock and i_mmap_rwsem. Specifically migrate_pages -> migrate_hugetlbs -> unmap_and_move_huge_page -> remove_migration_ptes -> __rmap_walk_file() acquires i_mmap_lock_read while anot...

kernel: drm/xe: Use local fence in error path of xe_migrate_clear

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xemigrateclear The intent of the error path in xemigrateclear is to wait on locally generated fence and then return. The code is waiting on m-fence which could be the local fence but this ...

GHSA-FCV2-XGW5-PQXF sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal

Summary The legacy TUF client pkg/tuf/client.go, which supports caching target files to disk, constructs a filesystem path by joining a cache base directory with a target name sourced from signed target metadata, but it does not validate that the resulting path stays within the cache base...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56611)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56611 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migratetonode assuming...

MiracleLinux 7 : pcp-4.3.2-12.el7 (AXSA:2020-703:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-703:06 advisory. pcp: Local privilege escalation in pcp spec file %post section CVE-2019-3695 A Improper Control of Generation of Code vulnerability in the packaging ...