Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000730 advisory. The fusefillwritepages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service infinite loop via a writev system ca...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001380 advisory. An issue was discovered in fs/fuse/fusei.h in the Linux kernel before 5.11.8. A stall on CPU can occur because a retry loop continually finds the same bad inode, aka...

MiracleLinux 7 : fuse-2.9.2-11.el7 (AXSA:2019-3674:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3674:01 advisory. fuse: bypass of the userallowother restriction when SELinux is active CVE-2018-10906 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000688 advisory. The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mountin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003603 advisory. The Linux kernel before 5.1-rc5 allows page-refcount reference count overflow, with resultant use-after- free issues, if about 140 GiB of RAM exists. This is related...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001409 advisory. A use-after-free flaw was found in the Linux kernels FUSE filesystem in the way a user triggers write. This flaw allows a local user to gain unauthorized access to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001431 advisory. An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fusedogetattr calls makebadinode in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004463 advisory. An issue was discovered in fs/fuse/fusei.h in the Linux kernel before 5.11.8. A stall on CPU can occur because a retry loop continually finds the same bad inode, aka...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000855 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...

CVE-2025-68791

A reference count leak flaw was found in the Linux kernel's FUSE filesystem when using iouring for argument copies. The copyfinish function is not called in error paths, causing page reference counts to leak. This can lead to memory being pinned indefinitely and potential resource exhaustion...

SUSE CVE-2025-68791

In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse-over-io-uring argument copies Fix a possible reference count leak of payload pages during fuse argument copies. Joanne: simplified error cleanup...

SUSE CVE-2025-68805

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003276 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003029 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002638 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001952 advisory. The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mountin...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003000 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002027 advisory. The fusefillwritepages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service infinite loop via a writev system ca...

CVE-2025-68805

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001245 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...