Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104575 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhostvdpammap and vhostvdpafault use...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098851)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098851 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104538 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhostvdpammap and vhostvdpafault use...

CVE-2026-74702

A flaw was found in the vhost-scsi component of the Linux kernel. This vulnerability allows a local attacker to cause a denial of service DoS by changing virtio feature bits after the vhost-scsi endpoint has been activated. Specifically, enabling the T10-PI feature after setup can lead to an...

CVE-2026-74703

A flaw was found in the Linux kernel's vhost-scsi component. When T10 Protection Information PI is negotiated, a remote attacker could send a specially crafted request with malformed scatterlist counts. This could lead to an invalid memory allocation operation, triggering a kernel panic and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vhost: Fix vhostgetavailidx for a non-empty ring vhostgetavailidx is supposed to report whether vq-availidx has been updated. Instead, it returns whether all entries have been consumed, which is usually the same. However, not...

CVE-2026-74703

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...

CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74703

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...

UBUNTU-CVE-2026-74713

In the Linux kernel, the following vulnerability has been resolved: vhostiotlb: bound map allocation in addrange vhostiotlbaddrangectx only retires an old entry when the table has a non-zero limit, has exactly reached that limit and has VHOSTIOTLBFLAGRETIRE set. Non-retiring tables can keep...

UBUNTU-CVE-2026-74703

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...

CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

UBUNTU-CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74702 vhost-scsi: reject feature changes after endpoint

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74702 vhost-scsi: reject feature changes after endpoint

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74703

CVE-2026-74703 affects the Linux kernel's vhost-scsi component. When T10 Protection Information (PI) is negotiated, a malformed request can declare protection bytes that cover or exceed the full payload length. This causes a zero data SGL count to reach sg_alloc_table_chained() , triggering a BUG...

CVE-2026-74703 vhost-scsi: Validate T10 PI scatterlist counts

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...

CVE-2026-74702

CVE-2026-74702 affects the vhost-scsi component of the Linux kernel. The root cause is that vhost_scsi_setup_vq_cmds() allocates the protection scatterlist array (prot_sgl) based on the VIRTIO_SCSI_F_T10_PI feature bit at endpoint setup, but command pools are not rebuilt when VHOST_SET_FEATURES l...

EUVD-2026-64389

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...