Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002783 advisory. Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003177 advisory. In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002488 advisory. The sndctlelemadd function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the userctlcount...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003226 advisory. The sndtimeruserparams function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003089 advisory. Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free or possibly have unspecified...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003366 advisory. sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003209 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002958 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002896 advisory. Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-fr...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003360 advisory. Use-after-free vulnerability in the sndpcminfo function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. Tenabl...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003341 advisory. The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002735 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001752 advisory. A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the...

ROS-20260114-7325

A vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource "Race Situation" when processing SysEx messages. Exploitation of the vulnerability could allow an attacker to cause a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000819 advisory. The createfixedstreamquirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause...

UBUNTU-CVE-2025-71081

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...

CVE-2025-68783

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices getmeterlevelsfromurb parses the 64-byte meter packets sent by the device and fills the per-channel arrays meterlevel, complevel and masterlevel in struct...

MiracleLinux 9 : kernel-5.14.0-570.58.1.el9_6 (AXSA:2025-11021:85)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11021:85 advisory. kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry...

CVE-2023-40639

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...