USN-8328-1: OpenJDK 21 vulnerabilities

Thomas Beckers discovered that the JAXP component of OpenJDK 21 did not correctly authenticate certain APIs. A remote unauthenticated attacker could possibly use this issue to gain unauthorized access to sensitive information. CVE-2026-22016 It was discovered that the Networking component of...

USN-8153-1 salt vulnerabilities

Zach Malone discovered that Salt did not properly handle permissions to cache data. A local attacker could possibly use this issue to obtain sensitive information. CVE-2015-8034 Dylan Frese discovered that Salt incorrectly allowed users to specify PAM service. An attacker could possibly use this...

CVE-2026-0012

In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000830 advisory. The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtai...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000884 advisory. net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000567 advisory. net/llc/sysctlnetllc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000601 advisory. The ipxrecvmsg function in net/ipx/afipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000571 advisory. The mISDNsockrecvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the siz...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001049 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003998 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001391 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000748 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001899 advisory. drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certai...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002519 advisory. net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002139 advisory. The mpgetcount function in drivers/staging/sb105x/sbpcimp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002859 advisory. The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002512 advisory. The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows loc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002995 advisory. Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003552 advisory. The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002402 advisory. Use-after-free vulnerability in the xacctaddtsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive...