Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146310 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146312)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146312 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146317 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the siz...

RockyLinux 8 : gcc (RLSA-2026:89830)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89830 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146333 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via...

SUSE SLES12: openssh8.4 / openssh8.4-clients / openssh8.4-common / etc (SUSE-SU-2026:4907-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4907-1 advisory. - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. - CVE-2026-59997: sshd:...

PT-2026-126556

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the Networking: DNS component. Use-after-free is a memory...

PT-2026-127265

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Video component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-127294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Compositing component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-127301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Paint component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-127304

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in WTF, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use afte...

PT-2026-126566

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the Graphics component. Use-after-free is a memory...

PT-2026-126510

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the SVG component...

PT-2026-126518

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the DOM: Bindings WebIDL...

Linux Distros Unpatched Vulnerability : CVE-2026-98998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-scanner Detection-only triage scanner for PHP2Sh...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

kernel: fuse: re-lock request before replacing page cache folio

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. The fusetrymovefolio function, responsible for managing page cache folios, fails to re-lock a request after initially unlocking it on a successful path. This oversight allows another function, fusechanabort, to...

kernel: ipvs: reload ip header after head reallocation

A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...

kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release()

A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...