Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100576 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxf...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099713)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099713 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

RHEL 9 : 389-ds-base (RHSA-2026:55423)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55423 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

The vulnerability of the fs/pstore/ram_core.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/pstore/ramcore.c component in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mt7996_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver for mediatek’s Linux kernel allows a hacker to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the mt7996macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...

The vulnerability in the fs/ntfs3/fslog.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the fs/ntfs3/fslog.c component of the Linux operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rga_buf_init() function in the drivers/media/platform/rockchip/rga/rga-buf.c driver for multimedia devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rgabufinit function in the drivers/media/platform/rockchip/rga/rga-buf.c file of the Linux multimedia device driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

The vulnerability of the adxl380_irq_handler() function in the drivers/iio/accel/adxl380.c module of various types of embedded sensors of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adxl380irqhandler function in the drivers/iio/accel/adxl380.c module of various types of embedded sensors in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mt7925_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the mt7925macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...

The vulnerability in the driver/infiniband/core/user_mad.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/infiniband/core/usermad.c component of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/xfs/libxfs/xfs_attr_leaf.c component in the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the fs/xfs/libxfs/xfsattrleaf.c component in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

RockyLinux 8 : 389-ds:1.4 (RLSA-2026:55530)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55530 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference i...

Linux Distros Unpatched Vulnerability : CVE-2026-19968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099488 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Important: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099708 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size...

Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI...

Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash...

Important: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100736 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistentramsaveold persistentramsaveold can be called multip...