SUSE CVE-2026-72127

In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdevnlnapifillone reports the NAPI kthread PID in NETDEVANAPIPID using taskpidnr, which returns the PID in the initial pid namespace. NETDEVCMDNAPIGET does not...

`zbus_polkit`: authorization bypass via PID reuse

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

RUSTSEC-2026-0278 `zbus_polkit`: authorization bypass via PID reuse

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

Important: mrtg

Issue Overview: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the...

Amazon Linux 2 : mrtg, --advisory ALAS2-2026-3884 (ALAS-2026-3884)

The version of mrtg installed on the remote host is prior to 2.17.4-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3884 advisory. A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-78422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the...

PT-2026-83844

Subject::new for owner in the zbus polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit...

PYSEC-2026-3958

In opensslencrypt pip package openssl-encrypt versions = 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument on both encrypt and decrypt paths instead of via an environment variable as done for the main password...

MiracleLinux 9 : mrtg-2.17.7-12.el9_8.1 (AXSA:2026-1680:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1680:02 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...

CVE-2026-75037

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037

LACT (Linux AppContainer Tool), a Linux-based application container management tool, is vulnerable to an authentication bypass through its Polkit authorization mechanism. The root cause lies in the reliance on UnixProcessSubject / Peer PID for Polkit authentication, which can be exploited locally...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

EUVD-2026-65390

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037: Authentication Bypass by Spoofing

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

PT-2026-81257

Name of the Vulnerable Software and Affected Versions LACT versions prior to 0.10.1 Description An authentication bypass exists in LACT on Linux due to the way Polkit authentication is handled based on UnixProcessSubject and Peer PID. This allows an attacker to circumvent the required...

AlmaLinux 9 : mrtg (ALSA-2026:57600)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:57600 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netdev-genl: The report NAPI thread PID in the caller’s pid namespace function now correctly reports the NAPI kthread PID in the NETDEVANAPIPID using taskpidnr, which returns the PID from the caller’s pid namespace. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed NULL pointer dereferencing in bpftaskfromvpid. bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: c findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent...