Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-106458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106458 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...

PT-2026-85373

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

PT-2026-86187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mshv irqfd deassign function because it fails to hold the pt-pt irqfds lock during the hlist traversal of pt irqfds list. This creates a race with the...

PT-2026-91784

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof widget setup unlocked If either tplg ops-dai config or widget kcontrol setup fail during widget setup we would double decrement the use count of the widget because the sof widget free...

CVE-2026-80911: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sofwidgetsetupunlocked If either tplgops-daiconfig or widgetkcontrolsetup fail during widget setup we would double decrement the usecount of the widget because the sofwidgetfreeunlocked wou...

PT-2026-86202

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ASoC SOF audio component within the sof widget setup unlocked function. If tplg ops-dai config or widget kcontrol setup fails during widget setup, the system doubl...

PT-2026-91341

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTP CMD DELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...

kernel security update

6.12.0-211.51.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

PT-2026-91324

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double list add tail call on bh-b assoc buffers within nilfs lookup dirty data buffers. Analysis revealed that the root cause was the...

Linux Distros Unpatched Vulnerability : CVE-2026-85218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AVRCP ListPlayerAttributes double stack overflow in avrcplistplayerattributesrsp/avrcpgetcurrentplayervalue fedora-all CVE-2026-85218 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-80843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: fix xfrmstateconstruct auth-trunc leak attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no...

Linux net/tipc/msg.c Heap Buffer Overflow

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-80896: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits it. This races with the EPOLLHUP path in mshvirqfdwakeup, which does...

Linux amdgpu_userq_vm_validate Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqvmvalidate function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c file of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85648

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double list add tail call on bh-b assoc buffers within nilfs lookup dirty data buffers. Analysis revealed that the root cause was the...

PT-2026-85624

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...

Linux Distros Unpatched Vulnerability : CVE-2026-84964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already...

RHEL 10 : kernel (RHSA-2026:63128)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63128 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear...

RHEL 9 : kernel (RHSA-2026:63129)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63129 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smc: Fix use-after-free in...