Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107268)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107268 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: harden blockgroup::bglist against listdel races As far as I can tell, these calls of...

PT-2026-90262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SUNRPC component where a backchannel receive can complete a request during the teardown of the NFS callback service. When xprt complete bc request removes a reques...

ROS-20260911-73-0095

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTM...

ROS-20260911-73-0135

The vulnerability of the Updater component in the Google Chrome browser for MacOS operating systems is due to a race condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

PT-2026-90007

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A race condition in the document value layer allows concurrent server threads to operate on the same internal memory without synchronization, causing memory corruption. An authenticate...

PT-2026-90391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the nfsd component during async copy cancel and shutdown operations. A race condition occurs between a teardown caller such as OFFLOAD CANCEL, nfsd4...

CVE-2026-89675: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller OFFLOADCANCEL, nfsd4shutdowncopy, nfsd4cancelcopybysb raced the copy kthread: - findasynccopy bumped...

PT-2026-90431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the NFS localio component when the nfs uuid add file function races with nfs uuid put during the teardown of uuid-net. In this scenario, the system returns...

PT-2026-90482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pidfd ioctl function where PIDFD GET NAMESPACE ioctls perform a filesystem credentials ptrace access check without holding the target task's exec update lock. This...

CVE-2026-89684: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4initcpstate nfs4allocinitcpntfstate published the new cpntf entry into the s2scpstateids IDR with cstype set in one s2scplock section, then took the lock again to listadd it onto pstid-sccplist...

CVE-2026-89540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs mutexinit on sn-gssplock. Once the dentry is linked under...

CVE-2026-89099: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

PT-2026-90219

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the ring buffer alloc read page and ring buffer subbuf order set functions. This occurs when the subbuf order value changes during the execution of ring...

CVE-2026-89503: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...

CVE-2026-89520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...

PT-2026-96428

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out of sync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smc connection and every store to one is a read-modify-write of the other two...

PT-2026-90455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the usb dwc3 gadget component due to a race condition. In dwc3 gadget init endpoint, the &dep-nostream work is bound with dwc3 nostream work. When a DEPE...

PT-2026-90487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ring-buffer component where trace buffer subbuf size is read without locking in the ring buffer read page and ring buffer read start functions. This occurs...

ROS-20260911-73-0107

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML...

PT-2026-96554

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs exorcise daemon drops queued messages from a dying daemon without holding ecryptfs msg ctx lists mux, but ecryptfs msg ctx alloc to free requires that lock. Tak...