The vulnerability of the ipu6pci_probe() function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux kernel’s multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the ipu6pciprobe function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux multimedia device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow...

The vulnerability of the advance_sched() function in the net/sched/sch_taprio.c module of the network scheduling subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the advancesched function in the net/sched/schtaprio.c module of the Linux operating system’s traffic management subsystem is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the netvsc_copy_to_send_buf() function in the drivers/net/hyperv.netvsc.c driver for Linux kernel-based network devices allows a attacker to cause a service failure.

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the sctp_sock_dump_one() function in the net/sctp/diag.c module of the Linux operating system’s SCTP (Stream Control Transmission Protocol) kernel allows a attacker to gain access to protected information or cause service failures.

The vulnerability of the sctpsockdumpone function in the net/sctp/diag.c module of the Linux operating system’s SCTP Stream Control Transmission Protocol kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the map_kptr_match_type() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the ovs_flow_cmd_set() function in the net_openvswitch/datapath.c module, which is part of the Open vSwitch router support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the ovsflowcmdset function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch switchboard for Linux operating systems, involves releasing an incorrect pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the xe_display_init_early() function in the drivers/gpu/drm/xe/display/xe_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the ps883x_retimer_probe() function in the drivers/usb/typec/mux/ps883x.c file of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the ps883xretimerprobe function in the drivers/usb/typec/mux/ps883x.c file of the Linux USB TypeC driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the virtio_gpu_remove() function of the drivers/gpu/drm/virtio/virtgpu_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpuremove function in the drivers/gpu/drm/virtio/virtgpudrv.c driver of the Direct Rendering Infrastructure DRI subsystem in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106186 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

MiracleLinux 8 : php:7.4 (AXSA:2026-1772:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1772:01 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar...

Linux Distros Unpatched Vulnerability : CVE-2026-80809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106173 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106172 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-80822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the...

PT-2026-85609

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260 i2c read points dev-read buf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the...

PT-2026-85729

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTP CMD DELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...

PT-2026-85512

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...