Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142755 advisory. In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142536 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142739 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142510 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143120 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143098 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143100 advisory. In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 net-gro: Fix GRO flush...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets CVE-2025-22063 kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ALSA: hda/cs35l41...

CLSA-2026-1791878869 Fix of 274 CVEs

CVE-2026-53091 - xfrm: Don't clobber inner headers when already set CVE-2026-53091 - net: account for encap headers in qdisc pkt len CVE-2026-53091 CVE-2026-93803 - wifi: libipw: fix key index receive bound checks CVE-2026-93803 CVE-2026-93286 - net: appletalk: fix NULL pointer dereference in...

CLSA-2026-1791132078 Fix of 160 CVEs

CVE-2026-64375 - proc: protect ptracemayaccess with execupdatelock FD links CVE-2026-64375 - exec: Add execupdatemutex to replace credguardmutex CVE-2026-64375 CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent...

SUSE CVE-2026-98553

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...

SUSE CVE-2026-98616

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...

SUSE CVE-2026-98641

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98815

In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in 0 - the code there is heavily based on the NVMe code. Currently the NS head .open and .release fileoperations methods take and put a...

CLSA-2026-1789373487 Fix of 123 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

CLSA-2026-1783337056 Fix of 30 CVEs

CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in readonechunk CVE-2022-50300 CVE-2022-50082 - ext4: fix warning in ext4iomapbegin as race between bmap and wri...

K000163833: Linux kernel vulnerability CVE-2026-46114

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMICWRITE payloads atomicwritereply at drivers/infiniband/sw/rxe/rxeresp.c unconditionally dereferences 8 bytes at payloadaddrpkt: value = u64 payloadaddrpkt; checkrkey...

K000163832: Linux kernel vulnerability CVE-2026-46121

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcgpath kfree with damonsysfslock Patch series "mm/damon/sysfs-schemes: fix use-after-free for memcgpath". Reads of 'memcgpath' and 'path' files in DAMON sysfs...

CVE-2026-98659

A flaw was found in the Linux kernel's ROHM BM1390 Industrial I/O IIO sensor driver. The driver fails to propagate error status codes when a read operation fails, unconditionally returning success. A local user querying the sensor can receive invalid or uninitialized measurement data without an...