11631 matches found
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...
Linux Distros Unpatched Vulnerability : CVE-2025-71130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001769)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001769 advisory. A flaw was found in the Netfilter subsystem in the Linux kernel. The sctpmtcheck did not validate the flagcount field. This flaw allows a local privileged CAPNETADMI...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000985)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000985 advisory. Use-after-free vulnerability in the sndpcminfo function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. Tenabl...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001373)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001373 advisory. An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMA...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001752)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001752 advisory. A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001505)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001505 advisory. A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race...
ROS-20260114-7325
A vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource "Race Situation" when processing SysEx messages. Exploitation of the vulnerability could allow an attacker to cause a denial of...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001578)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001578 advisory. In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001350)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001350 advisory. A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/ttyio.c and drivers/tty/ttyjobctrl.c may allow a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001257)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001257 advisory. A NULL pointer dereference was found in the net/rds/rdma.c rdsrdmamap function in the Linux kernel before 4.14.7 allowing local attackers to cause a system panic and...
CVE-2026-20875
Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
CVE-2026-20854
Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network...
CVE-2026-20827
Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-20870 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-20854 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
...
CVE-2026-20920 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
...