Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000380 advisory. An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000184 advisory. In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000316 advisory. In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000432 advisory. Two memory leaks in the rtlusbprobe function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000237 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000376 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000472 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000404 advisory. In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlinkcit.c aka the Xirlink camera USB driver mishandles invalid descriptors, aka CID-a246b4d54770. Tenabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000187 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the...

Medium: grub2

Issue Overview: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the netsetvlan command is not properly unregistered when the network module is unloaded from memory...

PT-2026-27712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to USB communication with the f81604 CAN controller. Specifically, the issue concerns the incorrect anchoring of URB USB Request Block structure...

PT-2026-27730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The kalmia driver does not properly validate the number and types of USB endpoints a device has before binding to it. A malicious device lacking expected USB endpoints can cause the driv...

PT-2026-27677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The kaweth driver does not validate the number and types of USB endpoints of a device before binding to it. A malicious device lacking expected USB endpoints can cause the driver to cras...

PT-2026-27689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the handling of USB urb USB Request Block anchoring within the etas es58x CAN Controller Area Network driver. Specifically, the read bulk callback lacked proper anchorin...

PT-2026-5534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the gs can open function related to USB-in transfer URBs. The URBs are allocated and submitted, but not always freed in gs can close due to the USB framework...

PT-2026-6148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ALSA subsystem, specifically within the scarlett2 module. A logic error in the scarlett2 usb get config function’s endianness conversion code can lead...

PT-2026-27655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The pegasus driver does not validate the number and types of USB endpoints a device has before binding to it. A malicious device lacking expected USB endpoints can cause the driver to...

SUSE CVE-2022-50825

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...

SUSE CVE-2023-54213

In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the sisusbvga driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 26 at...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993165 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low...