PT-2026-3121

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R5 Description The TLS/SSL server in Juniper Networks Junos Space allows the use of static key ciphers, which reduces the confidentiality of on-path traffic. These ciphers do not support Perfe...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003532 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002906 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in trymergefreespace when mounting a crafted btrfs image, because of a lack of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002847 advisory. The acpinsterminate function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002773 advisory. An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix- timers.c in the POSIX timer code is caused by the way the overr...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003416 advisory. The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003541 advisory. The udlfbmmap function in drivers/gpu/drm/udl/udlfb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing loc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001696 advisory. A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001726 advisory. There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space. Tenable has...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a ftrace that could lead to memory corruption when the kernel is located outside of 32-bit addresses...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001694 advisory. A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device usin...

CVE-2026-22025

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, when the KMC server returns a non-200 HTTP...

CVE-2026-21900

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, an out-of-bounds heap read vulnerability in...

CVE-2026-21897

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, the CryptoConfigAddGvcidManagedParameters...

CVE-2026-22697

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is...

CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68793

CVE-2025-68793 affects the Linux kernel’s AMDGPU GPU recovery path. The issue is a race between the sched timeout callback and the tdr work queue during gpu recovery, where drm_sched_start() can resume the tdr queue and later free a job, risking a use-after-free on the pasid if the timeout comple...

CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not assert that we found a block group item when creating a free space tree. Currently, when building a free space tree using populatefreespacetree, if we are not using the block group tree feature, we always expect to...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU, specifically in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size of virtqueuepush, as specified in virtioscsicompletereq, virtioblkreqComplete, and viritocryptoreqComplete, might be larger than the actual size of the data that has been sent to the...