Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099754 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100293 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100143 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets...

The vulnerability of the ec_bhf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ecbhf component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100570 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfre...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100150)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100150 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099897)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099897 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rdsibsendcqehandler on masked atomic completion rdsibxmitatomic always...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099742 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert IB/isert: Fix incorrect release of isert connection Commit: 699826f4e30a IB/isert: Fix...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099943 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in sndpcmdrain on linked streams sndpcmdrain uses...

SUSE CVE-2026-74457

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

CVE-2026-74470

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

CVE-2026-74457

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

AZL-96186 CVE-2026-74457 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

CVE-2026-74442

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

UBUNTU-CVE-2026-74457

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

CVE-2026-74457

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

UBUNTU-CVE-2026-74442

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

CVE-2026-74518

CVE-2026-74518 — Linux kernel: mm/hugetlb list corruption in allocate_file_region_entries() fixed. The bug allowed a corrupted resv->region_cache when top‑up relied on list_splice() leaving a stale source head during a retry loop under concurrent mappings of hugetlbfs. The fix uses list_splice...

CVE-2026-74470

The CVE-2026-74470 issue affects the Linux kernel in the scsi_debug path for REPORT ZONES replies. The vulnerability arises from an alloc_len handling bug where resp_report_zones() derives arr_len and rep_max_zones from the CDB alloc_len; for large alloc_len (0xFFFFFFC1..0xFFFFFFFF) ALIGN() can p...