Linux Distros Unpatched Vulnerability : CVE-2026-88753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to...

Linksys E1700 Router MAC Filter Buffer Overflow DoS

The vulnerability of the ssid1MACFilter function in the Mac Filter component of the Linksys E1700 router’s microprogramming system is related to the issue where the operation is executed outside the buffer in memory when processing the parameter newaptext%d. Exploiting this vulnerability could...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kfddqmsuspendbadqueuemes function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Linux operating system is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker to cause a service...

CVE-2025-55640

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2026-46471

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131753 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode-iop in ntfslookup Syzbot reported a null-ptr-deref bug:...

AlmaLinux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792166468)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792166468 advisory. - A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus socke...

Linux Distros Unpatched Vulnerability : CVE-2026-111152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Game Music Emu libgme through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131783 advisory. A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage function tries t...

Rocky Linux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792166468)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792166468 advisory. - A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131745 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131776 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the allocmtkintrurb function in the drivers/bluetooth/btmtk.c kernel module of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux SCTP Verify Function Data Compromise

The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...

EUVD-2025-211112

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3.1 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167666 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167656 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...