Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002458 advisory. The reportfixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service out-of-bound...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002522 advisory. The logprefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local use...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001989)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001989 advisory. Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entire...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003476 advisory. The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of- bounds read and system crash or possibly have unspecified...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002410 advisory. Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entire...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001935 advisory. The Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGLOGITECHFF, CONFIGLOGIG940FF, or CONFIGLOGIWHEELSFF is enabled, allows physical...

CVE-2026-20859

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2025-12053

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12052

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12050

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

PT-2026-2440

Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001692 advisory. A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of...

PT-2026-2439

Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...

CVE-2026-20859

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-20810

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

January 13, 2026—KB5073699 (Security-only update)

None None...

Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

January 13, 2026—KB5073450 (OS Build 25398.2092)

None None...

CVE-2025-71098

The CVE CVE-2025-71098 affects the Linux kernel’s IP6_GRE path. Syzbot crashes were caused by ip6gre_header() relying on dynamic dev->needed_headroom/dev->hard_header_len, enabling skb underflow when an skb with insufficient headroom was used (e.g., during mld_sendpack/mld_finish_output pat...