PT-2026-82128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the list:set garbage collection GC and the swap operation. The function ip set put byindex resolves an index to a set...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

MiracleLinux 9 : [security - high] mysql:8.4 (AXSA:2026-1665:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1665:01 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-470...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-py (UTSA-2026-093196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093196 advisory. A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial...

RHCOS 4 : Red Hat build of MicroShift 4.18.54 (RHSA-2026:57914)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57914 advisory. - net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 - net/mail: golang: net/mail: Denial of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104556 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sgcleanup error path used listi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104585 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first...

CVE-2026-26449

Stomper (commit 5e2741e) is vulnerable to a null pointer dereference when a client sends a STOMP SEND frame missing the destination header field. The server crashes while processing the malformed frame, resulting in a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104602 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dmareleasechannel, check chan-device-privatecnt after...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104586 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical imode type Patch series ocfs2: harden inode validators...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098990 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: validate MAC header was set before dumping it The fallback path of dumpmacheade...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...

CVE-2026-26448

Stomper (commit 5e2741e) contains a heap use-after-free in its STOMP protocol broker. When a client sends multiple CONNECT frames on the same TCP connection and a subsequent client or connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereferenc...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

PT-2026-82140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference may occur under memory pressure due to missing validation of an allocated pointer within the optee ffa lend protmem function. A null dereference happens when a program...

PT-2026-82180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the gve driver due to a missing implementation of the adjfine function. This issue can be triggered from usermode through the ptp clock adjtime...

PT-2026-82177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the decode locker function within cls lock client.c contains three unsafe decode operations. A malicious or compromised OSD Object Storage Device in a multi-tenant...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...