Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001634 advisory. The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly hav...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002917 advisory. The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003090 advisory. Race condition in the auditlogsingleexecvearg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002769 advisory. The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001934 advisory. Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service host OS crash or gain privileges by writing to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003075 advisory. An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003004 advisory. The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002758 advisory. Race condition in the ecdeviceioctlxcmd function in drivers/platform/chrome/crosecdev.c in the Linux kernel before 4.7 allows local users to cause a denial of servic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003483 advisory. Race condition in the ecdeviceioctlxcmd function in drivers/platform/chrome/crosecdev.c in the Linux kernel before 4.7 allows local users to cause a denial of servic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002628 advisory. Race condition in the ioctlsendfib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003478 advisory. Race condition in the auditlogsingleexecvearg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002173 advisory. Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service host OS crash or gain privileges by writing to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002581 advisory. The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002971 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003347 advisory. The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly hav...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003039 advisory. The saa7164busget function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service out-of-bound...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003230 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003275 advisory. The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly hav...

Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion

Impact The fetch API supports chained HTTP encoding algorithms for response content according to RFC 9110 e.g., Content-Encoding: gzip, br. This is also supported by the undici decompress interceptor. However, the number of links in the decompression chain is unbounded and the default maxHeaderSi...

EUVD-2026-2422

Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leading to high CPU usage and excessive memory allocation. This...