CVE-2026-78701: Out-of-bounds Write

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-78701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: Fixed an use-after-free issue when the driver unbind. The DMA resource is initialized after the SPI controller is registered. Therefore, when the driver unbind occurs, this can lead to a use-after-free, especially...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: Core: Prevent panic during UVC unconfiguration Avichal Rakesh reported a kernel panic that occurred when the UVC gadget driver was removed from a gadget’s configuration. The panic involves a somewhat complex...

CVE-2026-72324

A flaw was found in the Linux kernel's Marvell EBU mvebu General Purpose Input/Output GPIO driver. The driver fails to properly free allocated generic chip data when an interrupt domain is removed during the unbind process. This oversight can lead to a resource leak, which may impact system...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099964 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100322 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressin...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099901 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removing DAIs and widgets When a sound card is unbound...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100705 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100764 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removing DAIs and widgets When a sound card is unbound...

CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

AZL-96126 CVE-2026-72324 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irqallocdomaingenericchips allocates generic chip data that must be freed via irqdomainremovegenericchips. The devres action mvebugpioremoveirqdomain only called irqdomainremove, which on...

UBUNTU-CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

UBUNTU-CVE-2026-72324

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irqallocdomaingenericchips allocates generic chip data that must be freed via irqdomainremovegenericchips. The devres action mvebugpioremoveirqdomain only called irqdomainremove, which on...

CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

UBUNTU-CVE-2026-72259

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

EUVD-2026-59562

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

CVE-2026-74415 spi: atcspi200: fix use-after-free when driver unbind

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

CVE-2026-74415 spi: atcspi200: fix use-after-free when driver unbind

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...