Linux Distros Unpatched Vulnerability : CVE-2026-72356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifsissueread Fix missing release of credits ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101985 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfeventoverflow vs perfremovefromcontext race Make sure that perfeventoverflow runs...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101973 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds ea...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102109 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: Release atmdevmutex after removing procfs in atmdevderegister. syzbot reported a warning bel...

Linux Distros Unpatched Vulnerability : CVE-2026-72081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command...

Linux Distros Unpatched Vulnerability : CVE-2026-72082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: elx: efct: Fix refcount leak in efcthwioabort When efcthwreqtagalloc fails in efcthwioabort, the error path returns -ENOSPC without releasing the referenc...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-72022

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. The llcuiautobind function fails to properly release a reference to a Service Access Point SAP after a successful autobind operation. A local user can repeatedly perform autobind and close cycles, which leads to the...

CVE-2026-74538

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A missing lock when accessing socket connection information within the isoconnectind function could lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-74528

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a use-after-free, occurs when the hcisync component improperly handles connection references, leading to the potential reuse and access of freed memory pointers. A remote attacker could exploit this to cause system...

CVE-2026-74471

A flaw was found in the Linux kernel's tracing subsystem. The tracemoduleaddevents function does not properly check the return value of registerevent. If event registration fails, a pointer to an event can still be created and retained even after the associated module memory is freed. This can le...

CVE-2026-72042

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. An issue in the event delivery mechanism, specifically a reference count underflow, can lead to a use-after-free vulnerability. This occurs when a user's reference count is prematurely decremented...

kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nfconntrackh323 module. This vulnerability occurs in the DecodeQ931 function when processing a zero-length value from a packet. An integer underflow during a length calculation results in a large, incorrect value...

kernel: rxrpc: Fix potential UAF after skb_unshare() failure

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100371 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsungtty: Fix a memory leak in s3c24xxserialgetclk when iterating clk When the bes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100378 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100497)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100497 advisory. In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099775 advisory. A flaw was found in the Linux kernels IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to caus...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099969 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no...