7371 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013559)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013559 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011344)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011344 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013264)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013264 advisory. In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver, ak...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011093)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011093 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: fix memory leak of urbs in ath9khifusbdealloctxurbs Syzkaller reports a...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006895)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006895 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usbparsessendpointcompanion...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011075)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011075 advisory. In the Linux kernel, the following vulnerability has been resolved: media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010929)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010929 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013260)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013260 advisory. In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusbdec.c driver, aka...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013081 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call paths This patch address...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011357)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011357 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep It is possible trigger below warning message from...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013288)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013288 advisory. An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011287)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011287 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in sndusbmixercontrolsbadd In sndusbcreatestreams,...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007054)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007054 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need t...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007034)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007034 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usbsubmiturb failure In asyncsetregisters, when usbsubmitur...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012985)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012985 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011407)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011407 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio...
CVE-2026-4666
The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of extract$args, EXTROVERWRITE on user-controlled input in the edit method of classes/Posts.php in all versions up to, and including, 2.4.16. The postedit action handler in Actions.php passes...
autopoc
AutoPoC Automated proof-of-concept deployments on OpenShift...
Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalination systems. The malware has been codenamed ZionSiphon by Darktrace, highlighting its ability to set up persistence, tamper with local...
