Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142746 advisory. In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pcidev LUT The PF SR-IOV enable path caches VF pcidev pointers in...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142477)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142477 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142478 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142730 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with...

Rocky Linux 10.2 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_87070)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687070 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption an...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142567 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderle...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143089 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table und...

RHEL 9 : php (RHSA-2026:87151)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87151 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142535 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142670 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to h...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142481)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142481 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_87072)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687072 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and R...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142472 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

PT-2026-121320

On October 21, 2026, two critical remote code execution RCE vulnerabilities, collectively known as "PHP2Shell", were disclosed in the PHP core. These vulnerabilities exploit a heap use-after-free UAF condition in PHP's session upload progress mechanism, enabling unauthenticated remote code...

PHP 8.5.11 Pre-Application OOM Use-After-Free

PHP version 8.5.11 contains a pre-application multipart parsing flaw that can leave stale worker state after an out-of-memory abort. The supplied proof of concept sends chunked multipart requests to demonstrate the affected session upload-progress path. https://packetstorm.news/download/237036...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143068 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142534 advisory. In the Linux kernel, the following vulnerability has been resolved: configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142699 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_87080)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687080 advisory. php: php: Out-of-bounds read via empty HTTP redirect Location header CVE-2026-93682 php: PHP: Archive entry injection via integer overflow in TAR parser...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143097 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock...