Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002880 advisory. A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel- memory from within a vm guest. A race condition between...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002742 advisory. In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003513 advisory. Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of servic...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002270 advisory. Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service memory consumption or system crash via invalid MAPHUGETL...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002313 advisory. The rfcommsockrecvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003506 advisory. Memory leak in the irdabind function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002009 advisory. The scosockbind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003016 advisory. The IPTSOSETREPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service out-of-bounds...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001832 advisory. The packetrecvmsg function in net/packet/afpacket.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structur...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001990 advisory. The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002576 advisory. Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSGMORE ipappenddata calls ipufoappenddata to append...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001857 advisory. The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNELDS option is set, which allows local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002876 advisory. An issue where a provided address with accessok is not checked was discovered in i915gemexecbuffer2ioctl in drivers/gpu/drm/i915/i915gemexecbuffer.c in the Linux...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002999 advisory. A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002973 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

CVE-2026-20809

Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

CVE-2025-58409

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-71110 mm/slub: reset KASAN tag in defer_free() before accessing freed memory

In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in deferfree before accessing freed memory When CONFIGSLUBTINY is enabled, kfreenolock calls kasanslabfree before deferfree. On ARM64 with MTE Memory Tagging Extension, kasanslabfree poisons the memory an...

CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

A use-after-free memory bug exists in the linux kernel, such that unpoisonmemory tries to check the PGHWPoison flags of an uninitialized page. So VMBUGONPAGEPagePoisonedpage is triggered, leading to damage to the system availability and integrity...