KB5074109: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 2025 Security Update (January 2026)

The remote Windows host is missing security update 5074109. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001597 advisory. The initnewcontext function in arch/x86/include/asm/mmucontext.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000848 advisory. The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a unam...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000637 advisory. The sndctlelemadd function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the userctlcount...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000641 advisory. Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vecto...

CVE-2026-0990

Vulnerability: CVE-2026-0990 affects libxml2. An uncontrolled recursion bug in xmlCatalogXMLResolveURI is triggered when a delegate URI entry references itself, allowing a remote attacker to craft an XML catalog that causes infinite recursion and stack exhaustion, resulting in DoS via application...

SUSE CVE-2025-68814

In the Linux kernel, the following vulnerability has been resolved: iouring: fix filename leak in ioopenatprep ioopenatprep allocates a struct filename using getname. However, for the condition of the file being installed in the fixed file table as well as having OCLOEXEC flag set, the function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003225 advisory. The x86/fpu Floating Point Unit subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correct...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003392 advisory. The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002478 advisory. The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002537 advisory. The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002522 advisory. The logprefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local use...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002309 advisory. The rdsibladdrcheck function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service NULL pointer dereference and system...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002032 advisory. The rdsiwladdrcheck function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service NULL pointer dereference and system cra...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003211 advisory. Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-fr...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001996 advisory. udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002128 advisory. The tcpreadsock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003328 advisory. The InfiniBand aka IB stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service kerne...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002222 advisory. arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the strict page permissions protection mechanism and modify the system-call table...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003266 advisory. The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC...