Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003725 advisory. TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003733 advisory. TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003094 advisory. The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003516 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002605 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002555 advisory. Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003514 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003534 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003131 advisory. Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002631 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002824 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003524 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003559 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003117 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003218 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003453 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

CVE-2026-22705

RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature...

EUVD-2026-1867

RustCrypto: Signatures has timing side-channel in ML-DSA decomposition...

GHSA-HCP2-X6J4-29J7 RustCrypto: Signatures has timing side-channel in ML-DSA decomposition

Summary A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. Details The analysis was performed using a constant-time analyzer that examines compiled assembly code for instructions with data-dependent timing...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in the Tab component of Google Chrome prior to version 141.0.7390.54 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Medium...