Lucene search
+L

66371 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107321 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxecompqueuepkt In rxecompqueuepkt an incoming response packet skb is...

9.8CVSS0.00815EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107293 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

7.8CVSS0.00218EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107267 advisory. In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about...

8.8CVSS0.00413EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90488

In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the folio clear dirty for io call in extent write cache pages with a plain folio test dirty check. Besides...

0.00176EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.6 views

PT-2026-90256

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp lock before publishing proc entry create use gss proxy proc entry publishes /proc/net/rpc/use-gss-proxy via proc create data before init gssp clnt runs mutex init on sn-gssp lock. Once the dentry is linked under...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90285

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm security cfm looks up a session on session list and then walks its DLC list without holding rfcomm mutex. Since RFCOMM session teardown uses rfcomm mutex, krfcomm...

0.002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90237

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick task releasing the rq lock Core scheduling's pick next task breaks when a -pick task implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

0.00189EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90176

In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90391

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller OFFLOAD CANCEL, nfsd4 shutdown copy, nfsd4 cancel copy by sb raced the copy kthread: - find async copy bumped...

0.00166EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90229

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT GET INFO stores guest-controlled num events sizeofeinfo in a 32-bit integer. On RV64, num events = 0x10000001 makes 0x100000010 truncate to 16. KVM then allocates...

0.00155EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90125

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp route lookup mctp route lookup uses rt-dev without holding a reference on it. mctp route lookup single returns the route under RCU only, so the route's device can be torn do...

0.00155EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90076

In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req-in.h out to the ring in fuse uring copy to ring and req-out.h back in fuse uring commit. Both headers live inside the fuse request...

0.00166EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90233

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix rq-core pick corruption under core scheduling Core scheduling's pick next task picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consiste...

0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-89909

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS0.00157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90469

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink lruvec I am seeing some rcu tasks stalls in the Meta fleet during reclaim. INFO: rcu tasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idle cpu...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90195

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp endpoint bh rcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A pack...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.11 views

PT-2026-90478

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin current label crit section AppArmor's begin current label crit section is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label...

0.00156EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.6 views

PT-2026-90341

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl poke timer / ghl urb at driver unbind For GHL Guitar Hero Live dongles, sony probe arms a periodic timer: ghl magic poke the timer callback submits sc-ghl urb, and the URB completion ghl magic poke cb...

0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.6 views

PT-2026-90466

In the Linux kernel, the following vulnerability has been resolved: tracing/user events: Clear copied tracing state before fork duplication dup task struct copies user event mm from the parent into the child, without grabbing a reference to it. user event mm dup should replace it, but it leaves...

0.002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.6 views

PT-2026-90103

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire comm receiver handler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

0.002EPSS
SaveExploits0References5
Rows per page
Query Builder