Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014323)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014323 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013664)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013664 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplusstrcasecmp The hfsplusstrcasecmp logic can trigger...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011325 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported issue in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011279 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplusstrcasecmp The hfsplusstrcasecmp logic can trigger...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012995 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported issue in...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011301 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusextcacheextent The syzbot reported issue in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013220 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARNON from hfspluscatread,writeinode syzbot is hitting WARNON in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013070 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusextcacheextent The syzbot reported issue in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010858 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007483 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus...

ROS-20260407-73-0011

A vulnerability in the fs/hfsplus/unicode.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker to gain access to confidential data, violate its integrity, and cause denial of service...

ROS-20260403-73-0008

A vulnerability in the fs/hfsplus/extents.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: fixed the KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported an issue in hfsplusdeletecat: 70.682285 T9333=========================================== 70.682943 T9333 BUG: KMSAN: uninit-value in...

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

...

Exploit for XML Entity Expansion in Cisco Secure_Endpoint

CVE-2023-20052 Exploit - Fixed Build Fixed Docker build for C...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: removed the mutexlock check in hfsplusfreeextents Syzbot reported an issue with the hfsplus filesystem: ------------ cut here --- WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplusfreeextents+0x700/0xad0 Ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000573 advisory. Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus...

hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create

...

CVE-2025-68767

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002775 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file...