Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003085 advisory. An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aacsendrawsrb...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002668 advisory. The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002122 advisory. The l2tpiprecvmsg function in net/l2tp/l2tpip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002331 advisory. The caifseqpktrecvmsg function in net/caif/caifsocket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003027 advisory. The atyfbioctl function in drivers/video/fbdev/aty/atyfbbase.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002212 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002429 advisory. The llcuirecvmsg function in net/llc/afllc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002841 advisory. The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002121 advisory. The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002085 advisory. The ax25recvmsg function in net/ax25/afax25.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001929 advisory. The irdarecvmsgdgram function in net/irda/afirda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obta...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002513 advisory. The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a unam...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001066 advisory. The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000639 advisory. The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive...

CVE-2023-31331

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability...

CVE-2021-0453

In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0450

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0449

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-38668

HTTP applications servers based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB...

CVE-2022-31026

Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory. Users of the trilogy gem should upgrade to version...