CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011018 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsecregistermdio If phydeviceregister fails, phydevicefree...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006992 advisory. In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fakeinit In fakeinit, rootdeviceregister is possible to fail but it...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010679)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010679 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix loadunalignedzeropad reg indices In exhandlerloadunalignedzeropad we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013321 advisory. In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011007 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosusbpdnotify: Fix error handling in crosusbpdnotifyinit The following WARNING...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011071)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011071 advisory. In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tptunnelregister When a file descriptor of pppol2tp...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013031 advisory. In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010979 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-010880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010880 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible leaked pernet namespace in smcinit In smcinit,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011189 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219registerdaiclks If clkhwregister fails, the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011117 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010960 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in sndac97devregister If deviceregister fails in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006962 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007024)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007024 advisory. In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset-kobj.ktype in ksetregister When I register a kset in the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011137 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix resource leak in regulatorregister I got some resource leak reports while...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011276 advisory. In the Linux kernel before 5.17, an error path in dwc3qcomacpiregistercore in drivers/usb/dwc3/dwc3-qcom.c lacks certain platformdeviceput and kfree calls. Tenable h...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012949 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013223 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in...

CVE-2026-29642

A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...