Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003591 advisory. drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000994 advisory. The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by sending each descriptor over a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004063 advisory. In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlinkcit.c aka the Xirlink camera USB driver mishandles invalid descriptors, aka CID-a246b4d54770. Tenabl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000966 advisory. The digiportinit function in drivers/usb/serial/digiacceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003593 advisory. drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000552 advisory. The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL point...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000876 advisory. The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001124 advisory. In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001064 advisory. The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux RHEL 7.1 allows physically proximate...

scsi: target: Reset t_task_cdb pointer in error case

...

kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses

A bounds-checking flaw was found in the Linux kernel Small Computer System Interface Enclosure Services driver in the way descriptor pointers are validated while processing enclosure data. Missing checks could allow an out-of-bounds access during parsing. A local user could use this flaw to crash...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002293 advisory. The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by sending each descriptor over a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003139 advisory. The usbgetbosdescriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service out-of-bounds read a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003247 advisory. The parsehidreportdescriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service out-of-bounds...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002985 advisory. The wacomprobe function in drivers/input/tablet/wacomsys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service NULL...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003064 advisory. The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002639 advisory. The initnewcontext function in arch/x86/include/asm/mmucontext.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002752 advisory. The createfixedstreamquirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002504 advisory. The rawcmdcopyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002751 advisory. The loadsegmentdescriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a MOV SS, NULL selector instruction, which...