Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003953 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001625 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004636 advisory. In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003748 advisory. An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000747 advisory. The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorre...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects

A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002616 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002987 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002973 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002701 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002944 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002638 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003270 advisory. The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorre...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003411 advisory. The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorre...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001877 advisory. Buffer overflow in the exitcodeprocwrite function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001245 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000621 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...