Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001985 advisory. The udfreadinode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002135 advisory. fs/overlayfs/copyup.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service dentry reference le...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002870)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002870 advisory. The procconnectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003026 advisory. A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4getgroupinfo function, a denial of service, and a system...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003077 advisory. Multiple memory leaks in error paths in fs/xfs/xfsattrlist.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service memory consumption via...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002699 advisory. In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001781 advisory. Heap-based buffer overflow in the udfloadlogicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002301 advisory. A missing authorization check in the fscryptprocesspolicy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel befor...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002777 advisory. In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002833 advisory. The getrockridgefilename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM aka alternate name entries containing \0 characters, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003410 advisory. A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002250 advisory. The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003112 advisory. Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4updateinlinedata. An...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002603 advisory. The sanitycheckrawsuper function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privilege...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003544 advisory. An issue was discovered in the nsgetpath function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001833 advisory. The udfreadinode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate...

CVE-2025-71123

In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parseapplysbmountoptions strscpypad can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 "string.h: Introduce memtostr and memtostrpad" provid...

CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

UBUNTU-CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

UBUNTU-CVE-2025-71107

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fsputsuper finishes Xfstests generic/335, generic/336 sometimes crash with the following message: F2FS-fs dm-0: detect filesystem reference count leak during umount, type: 9, count: ...