Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101319 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, mac...

The vulnerability in the driver/remoteproc/imx_rproc.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/remoteproc/imxrproc.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: crypto: ccp -...

PT-2026-73396

A flaw in Node.js HTTP/2 handling allows nghttp2 session mem send to be called re-entrantly while nghttp2 session mem recv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100129 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

RHEL 8 : kernel-rt (RHSA-2026:55765)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55765 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100114 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 head...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100930 advisory. JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8,...

The vulnerability of the rapidio component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rapidio component in the Linux operating system’s kernel is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100733 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ipvseditservice while unbinding the old scheduler...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101087 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100749 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 head...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100758 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at sndtimeruserparams At releasing a timer object, e.g. when a userspace tim...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099893 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of...

PT-2026-76836

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6.1 iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use-after-free issue exists in the...

The vulnerability of the `ice_vsi_set_napi_queues()` function in the `drivers/net/ethernet/intel/ice/ice_lib.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icevsisetnapiqueues function in the drivers/net/ethernet/intel/ice/icelib.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/server/transport_tcp.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/staging/rtl8723bs/osdep/ioctlcfg80211.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...