Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000760 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004411 advisory. A vulnerability was found in the Linux Kernel where the function sunkbdreinit having been scheduled by sunkbdinterrupt before sunkbd being freed. Though the dangling...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002581 advisory. The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002427 advisory. arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform improperly relies on espfix64 during nested NMI processing, which allows local users ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001776 advisory. Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service crash and possibly execu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002817 advisory. arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002744 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003426 advisory. KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003120 advisory. drivers/usb/serial/cypressm8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and syste...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001988 advisory. The recalculateapicmap function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service ho...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002622 advisory. drivers/usb/serial/cypressm8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and syste...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003477 advisory. KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002917 advisory. The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002666 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002721 advisory. The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via an out-of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002921 advisory. The mctu232msrtostate function in drivers/usb/serial/mctu232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NU...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003210 advisory. The treoattach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service NULL pointer...

CVE-2025-71132

In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPTRT When smc91x.c is built with PREEMPTRT, the following splat occurs in FVPRevC: 13.055000 smc91x LNRO0003:00 eth0: link up, 10Mbps, half-duplex, lpa 0x0000 13.062137 BUG: workqueue leaked...

CVE-2025-71132

In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPTRT When smc91x.c is built with PREEMPTRT, the following splat occurs in FVPRevC: 13.055000 smc91x LNRO0003:00 eth0: link up, 10Mbps, half-duplex, lpa 0x0000 13.062137 BUG: workqueue leaked...

UBUNTU-CVE-2025-71140

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previously a mutex was added to protect the encoder and decoder context lists from unexpected changes originating from the SCP IP block, causing the context...