Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100519 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100337 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is...

Important: isns-utils

Issue Overview: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. CVE-2026-55995 Affected Packages: isns-utils Issue Correction: Run dnf update isns-utils...

Important: isns-utils

Issue Overview: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. CVE-2026-55995 Affected Packages: isns-utils Note: This advisory is applicable to Amazon Linux 2...

Important: rust-cargo-c

Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a...

Important: libssh2

Issue Overview: libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with...

Important: iscsi-initiator-utils

Issue Overview: An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

Important: freerdp

Issue Overview: FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100554 advisory. In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099754 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099709 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

Linux driver/infiniband/core/umem_dmabuf.c DoS

The vulnerability in the drivers/infiniband/core/umemdmabuf.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver/remoteproc/imx_rproc.c DoS

The vulnerability in the drivers/remoteproc/imxrproc.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers net wan fsl_ucc_hdlc Component DoS

The vulnerability of the drivers/net/wan/fslucchdlc.c component in the Linux kernel lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel dm-rq.c DoS

The vulnerability of the dm-rq.c component in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel rxe module DoS

The vulnerability of the rxe module in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

cs42l43pinprobe Heap Buffer Overflow DoS

The vulnerability of the cs42l43pinprobe function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output interface is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100533 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100746 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de dm cache policy...

Linux Component Drivers Media USB PVRUSB2 DoS

The vulnerability of the drivers/media/usb/pvrusb2/pvrusb2-hdw.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...