Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142734)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142734 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142472 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143036)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143036 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging cephgetcaps with stale mdswanted A reader can hang forever in cephgetcaps when...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142494 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142674 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't fin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143090 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142505)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142505 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143049 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced...

CLSA-2026-1791878869 Fix of 274 CVEs

CVE-2026-53091 - xfrm: Don't clobber inner headers when already set CVE-2026-53091 - net: account for encap headers in qdisc pkt len CVE-2026-53091 CVE-2026-93803 - wifi: libipw: fix key index receive bound checks CVE-2026-93803 CVE-2026-93286 - net: appletalk: fix NULL pointer dereference in...

CLSA-2026-1791132078 Fix of 160 CVEs

CVE-2026-64375 - proc: protect ptracemayaccess with execupdatelock FD links CVE-2026-64375 - exec: Add execupdatemutex to replace credguardmutex CVE-2026-64375 CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent...

SUSE CVE-2026-98553

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...

SUSE CVE-2026-98616

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...

SUSE CVE-2026-98641

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98815

In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in 0 - the code there is heavily based on the NVMe code. Currently the NS head .open and .release fileoperations methods take and put a...

CLSA-2026-1789373487 Fix of 123 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

CLSA-2026-1783337056 Fix of 30 CVEs

CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in readonechunk CVE-2022-50300 CVE-2022-50082 - ext4: fix warning in ext4iomapbegin as race between bmap and wri...

K000163833: Linux kernel vulnerability CVE-2026-46114

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMICWRITE payloads atomicwritereply at drivers/infiniband/sw/rxe/rxeresp.c unconditionally dereferences 8 bytes at payloadaddrpkt: value = u64 payloadaddrpkt; checkrkey...

K000163832: Linux kernel vulnerability CVE-2026-46121

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcgpath kfree with damonsysfslock Patch series "mm/damon/sysfs-schemes: fix use-after-free for memcgpath". Reads of 'memcgpath' and 'path' files in DAMON sysfs...

CVE-2026-98659

A flaw was found in the Linux kernel's ROHM BM1390 Industrial I/O IIO sensor driver. The driver fails to propagate error status codes when a read operation fails, unconditionally returning success. A local user querying the sensor can receive invalid or uninitialized measurement data without an...