PT-2026-2285

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions prior to 1.1.0 Description The USB Host HID Human Interface Device Driver in ESP-IDF allows access to HID devices. Prior to version 1.1.0, the hid host device close function can free the same usb transfer t twice. Th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000432 advisory. Two memory leaks in the rtlusbprobe function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000474 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000367 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000404 advisory. In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlinkcit.c aka the Xirlink camera USB driver mishandles invalid descriptors, aka CID-a246b4d54770. Tenabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000381 advisory. In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000316 advisory. In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000204 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2usb.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000369 advisory. In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000465 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000376 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000187 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000385 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000184 advisory. In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000434 advisory. An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000380 advisory. An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000237 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000472 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000441 advisory. A memory leak in the rtl8xxxusubmitinturb function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel through 5.3.11 allows attackers to cau...

Medium: grub2

Issue Overview: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the netsetvlan command is not properly unregistered when the network module is unloaded from memory...