CVE-2026-74500

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver, specifically affecting RME Digiface devices. An unprivileged local user could exploit this vulnerability by reading the device status, which, due to an uninitialized buffer, may expose sensitive kernel...

CVE-2026-74456

A flaw was found in the Linux kernel's Controller Area Network CAN Universal Serial Bus USB driver. This vulnerability, a double free, occurs when a USB request block URB submission fails, causing the system to attempt to release the same memory twice. This could allow a local attacker to...

CVE-2026-72445

A flaw was found in the Linux kernel's ALSA USB audio driver for QCOM devices. An attacker, by providing an invalid service interval during stream enablement, can cause the audio substream to become unresponsive. This can lead to a Denial of Service DoS for the affected audio device, requiring a...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect CVE-2026-64342 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between...

The vulnerability in the component drivers/media/usb/pvrusb2/pvrusb2-hdw.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/usb/pvrusb2/pvrusb2-hdw.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100521 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100716 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in buildi2cfwhdr buildi2cfwhdr allocates a fixed-size buffer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099911 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usbcontrolmsg, usbbulkmsg, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100728 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in getmanufinfo getmanufinfo reads le16tocpuromdesc-Size byt...

Important: qemu

Issue Overview: In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a client's SetPixelFormat message. These fields are received as 16-bit values but are stored internally as uint8t. A malicious VNC...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100757 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099753 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099967 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catcprobe fills three URBs with hardcoded endpoint...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100772 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpiregister error paths Commit 01af542392b5 usb: ulpi: fix double...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100129 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

The vulnerability in the driver/net/usb/catc.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/usb/catc.c component in the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099969 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099706 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...