EUVD-2026-24579

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler PutObjectExtractHandler allows any user who knows a valid access key to write...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the SPI subsystem not using the general driveroverride infrastructure. This vulnerability may lea...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013453 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: cancel blk-mq dispatch work in both blkcleanupqueue and diskrelease For avoiding to slow...

PT-2026-34439

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A client can trigger excessive memory allocation by generating numerous error responses over a single DoQ DNS over QUIC and DoH3 DNS over HTTP/3 connection,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from manually releasing devmkzalloc memory in an incorrect path, potentially leading to double release...

PT-2026-34434

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in construct region Failing the first sysfs update group needs to explicitly kfree the resource as it is too early for cxl region iomem release to do so...

PT-2026-34551

Name of the Vulnerable Software and Affected Versions WinFSP versions prior to 2026 Beta1 Description A race condition vulnerability, specifically a Time-of-Check to Time-of-Use TOCTOU bug, exists in the driver. This occurs due to a multi-fetch of size used in ExAllocatePool, which can trigger a...

PT-2026-34346

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dmaengine idxd component when a workqueue is reset. The function idxd wq disable cleanup sets the workqueue type to NONE before its resources are released,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from OpenVSwitch releasing network devices before they are properly detached, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-31504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fix fanout UAF in packetrelease via NETDEVUP race packetrelease has a race window where NETDEVUP can re-register a socket into a fanout group's arr array...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of error paths. This vulnerability may lead to an imbalance in reference counts...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013567 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: Fix potential resource leaks nfcgetdevice take reference for the device, add missing...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013649 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmiiprobe ofphyfinddevice return device node...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013483 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smcsetsockopt and...

Oracle Linux 8 : thunderbird (ELSA-2026-9345)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-9345 advisory. 140.9.1-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.9.1 - Add OpenELA debranding 140.9.1-1 - Update to 140.9.1 ESR Tenab...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013574 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dioinit If deviceregister returns error, the 'dev' and...

PT-2026-34409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the packet release function where a NETDEV UP event can re-register a socket into a fanout group's arr array. Because packet release does not zero the po-num...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the applereportfixup function returning a newly allocated buffer without releasing it, potentiall...

Linux Distros Unpatched Vulnerability : CVE-2026-31509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix circular locking dependency in nciclosedevice nciclosedevice flushes rxwq and txwq while holding reqlock. This causes a circular locking dependenc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013788 advisory. In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in...