Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000434 advisory. An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000385 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000380 advisory. An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000184 advisory. In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000367 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000441 advisory. A memory leak in the rtl8xxxusubmitinturb function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel through 5.3.11 allows attackers to cau...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000204 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2usb.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000465 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000237 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000432 advisory. Two memory leaks in the rtlusbprobe function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000472 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000376 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000404 advisory. In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlinkcit.c aka the Xirlink camera USB driver mishandles invalid descriptors, aka CID-a246b4d54770. Tenabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000187 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000316 advisory. In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka...

CVE-2025-3653

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device contro...

CVE-2025-67397

Passy v1.6.3 is affected by CVE-2025-67397. A vulnerability allows a remote authenticated attacker to execute arbitrary commands through a crafted HTTP request using a specific payload injection, with impact reported as total (high risk). Root cause details are not fully disclosed in the provided...

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

Medium: grub2

Issue Overview: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the netsetvlan command is not properly unregistered when the network module is unloaded from memory...

PT-2026-1325

Name of the Vulnerable Software and Affected Versions Passy version 1.6.3 Description A flaw exists in Passy that could allow a remote attacker to execute arbitrary commands. This can occur through the serial interface by sending a specific code sequence. Additionally, a remote authenticated...