Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098951 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099006 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: cdcncm: add ndpoffset to NDP32 nframes bounds check The same bounds-check bug fixed for...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8668-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8668-1 advisory. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations,...

PT-2026-82128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the list:set garbage collection GC and the swap operation. The function ip set put byindex resolves an index to a set...

PT-2026-82139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the spacemit k3 clock driver where the HDMA clock, which manages the internal TCM Tightly Coupled Memory access path of the X100 RISC-V core, is not marked as critical...

PT-2026-82140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference may occur under memory pressure due to missing validation of an allocated pointer within the optee ffa lend protmem function. A null dereference happens when a program...

PT-2026-82166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds check exists in the ccwchain calc length function. This routine counts the number of channel command words CCWs chained together in a single channel program and is...

PT-2026-82168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the system failed to properly clamp the index for read/write regions to the range of the capabilities. While the capability chain...

PT-2026-82184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow can occur in the synaptics-rmi4 driver when the diagnostic report type is changed while streaming. Because V4L2 buffers are allocated based on the size at the star...

PT-2026-82187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the papr phy attest create handle function where the params-cmd.length variable is not validated before use, potentially leading to a buffer overflow. Additionally, a...

PT-2026-82146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system during the exchange of two full-file ranges. The function xmi can exchange reflink flags may incorrectly move the reflink inode flag between files...

PT-2026-82185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 work function reads a diagnostics report into the f54-report data buffer. The transfer size is determined by rmi f54 get...

Linux Distros Unpatched Vulnerability : CVE-2026-80551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to...

Linux Distros Unpatched Vulnerability : CVE-2026-80565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed...

Linux Distros Unpatched Vulnerability : CVE-2026-80569

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the...

PT-2026-82154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs rtginode ensure function incorrectly handles errors from xfs rtginode load. Specifically, it treats all errors except -ENOENT as...

PT-2026-82161

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The xcrb msg to type6 ep11cprb msgx function fails to properly validate input, leading to several security issues. Specifically, the ep11 cprb structure and payload fields pld tag and pl...

PT-2026-82173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the libceph component. The ceph start decoding function allows a struct len value of 0, which can lead to a situation where no bytes are guaranteed for...

PT-2026-82180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the gve driver due to a missing implementation of the adjfine function. This issue can be triggered from usermode through the ptp clock adjtime...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...