CVE-2026-80797

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...

CVE-2026-80784 mptcp: pm: fix memory leak from alloc-during-teardown race

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...

GHSA-W6WX-P63H-HR87 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7JV8-R36R-863G vulnerabilities

Vulnerabilities for packages: chromium...

EUVD-2026-70777

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...

CVE-2026-18567: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

Linux Distros Unpatched Vulnerability : CVE-2026-80738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type...

PT-2026-86197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing VLAN-tagged frames where the transport header is incorrectly set. In the packet parse headers function, skb set network header is called to advance the...

The vulnerability of the `pn_socket_autobind()` function in the `net/phonet/socket.c` module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the pnsocketautobind function in the net/phonet/socket.c module, which implements networking functions in the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-80849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock hel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106173 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...

PT-2026-85726

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the xfrm espintcp sockets during the close process. The espintcp close function frees emsg-skb using kfree skb without holding a socket lock. Simultaneously, t...

Linux Distros Unpatched Vulnerability : CVE-2026-80848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb...

PT-2026-85690

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

CVE-2026-85443

MOOS core-moos through 10.4.0 has a denial of service vulnerability in MOOSCommServer::ListenLoop(). The accept thread performs a blocking receive without timeout during the wire-protocol handshake. An unauthenticated network attacker can open a TCP connection to the MOOSDB port and send no data,...

EUVD-2026-42049

Phoenix: Unbounded channel joins per transport enables DoS over few connections...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, jupyter-base-notebook, vitess, prism, yaml-language-server, tileserver-gl...

SUSE CVE-2026-80733

In the Linux kernel, the following vulnerability has been resolved: net: remove WARNONONCE from skmcloop skmcloop can be called for sockets that are neither AFINET nor AFINET6 e.g. AFPACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan. In such case...

suricata_exporter v0.6.0

Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -versio...

CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...