PT-2026-96195

OwnedAlloc::drop in place destroys the contained value by hand, then commits the ownership transfer with mem::forgetself — which lives inside into raw and so runs only after the destruction. T::drop is user code and may panic. If it does, the forget is skipped and the still-live OwnedAlloc unwind...

PT-2026-89095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race occurs when toggling hardware VLAN TX offload specifically NETIF F HW VLAN CTAG TX or NETIF F HW VLAN STAG TX on a lower device. This process invokes the vlan transfer featur...

CVE-2026-76905

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific...

GHSA-2V4P-QF9Q-27WJ gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

A vulnerability exists in gRPC-Go servers configured with xds.NewGRPCServer where a crafted request missing both :authority and Host headers can cause a server panic, resulting in a Denial of Service DoS. Servers built with xds.NewGRPCServer install an xDS routing interceptor on every RPC. This...

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

A vulnerability exists in gRPC-Go servers configured with xds.NewGRPCServer where a crafted request missing both :authority and Host headers can cause a server panic, resulting in a Denial of Service DoS. Servers built with xds.NewGRPCServer install an xDS routing interceptor on every RPC. This...

SUSE CVE-2026-80825

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the headroom for them is already there. That holds for locally generated...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053246 advisory. In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053260 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before lookin...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073364 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053329 advisory. In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053211)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053211 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel panic when enabling bearer When enabling a bearer on a node, a kernel panic is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073354 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ipsetlist resize The release path of ipsetdumpdo and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053241 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtkdrmgemobj Add a check to mtkdrmgeminit if we attempt to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053240 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053421)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053421 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU If a system has isolated CPUs via the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053401 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2dioendiowrite...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

SUSE CVE-2026-47427

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

SUSE CVE-2026-52856

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...

SUSE CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...