Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102060 advisory. In the Linux kernel, the following vulnerability has been resolved: pagepool: always add GFPNOWARN for ATOMIC allocations Driver authors often forget to add GFPNOWAR...

EUVD-2026-55349

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

CVE-2026-68087

CVE-2026-68087 affects the Linux kernel HID wacom driver. The vulnerability stems from using GFP_KERNEL inside wacom_wac_queue_flush(), which is invoked from the atomic-context, URB-completion path (hid_irq_in()) via wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush. Using GF...

PT-2026-28332

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the nf tables module, specifically in the nft dynset component. This issue occurs when cloning stateful expressions. If the allocation of t...

PT-2025-54097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the debugobjects subsystem related to memory allocation within the fill pool function. Specifically, the allocation from debugobjects was using GFP...

DEBIAN-CVE-2024-56585

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix sleeping in atomic context for PREEMPTRT Commit bab1c299f3945ffe79 "LoongArch: Fix sleeping in atomic context in setuptlbhandler" changes the gfp flag from GFPKERNEL to GFPATOMIC for allocpagesnode. However, for...

kernel: debugobjects: Don't wake up kswapd from fill_pool()

A locking issue was found in the Linux kernel's debugobjects subsystem. The fillpool function uses GFPATOMIC allocation flags, which attempt to wake up kswapd and acquire kswapdwait::lock. Since fillpool may be called with arbitrary locks already held, this can trigger lockdep warnings about...