Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012967 advisory. In the Linux kernel, the following vulnerability has been resolved: serial/pmaczilog: Remove flawed mitigation for rx irq flood The mitigation was intended to stop t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011101 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010813 advisory. In the Linux kernel, the following vulnerability has been resolved: uio: uiodmemgenirq: Fix missing unlock in irq configuration Commit b74351287d4b uio: fix a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007040 advisory. In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in raininterrupt In the interrupt handler...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007039 advisory. In the Linux kernel, the following vulnerability has been resolved: rcu: Protect -deferqsiwpending from data race On kernels built with CONFIGIRQWORK=y, when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013163 advisory. In the Linux kernel, the following vulnerability has been resolved: lib: cpurmap: Avoid use after free on rmap-obj array entries When calling irqsetaffinitynotifier...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011028 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011150 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend sdmav40ip is shared on ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013165 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011311 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Enable IRQ when pdata is ready If the device does not come straight from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011342 advisory. In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012956 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SETIRQS ioctl currently allows...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012946 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011293 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013354)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013354 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlinkseterr syzbot reported a possible deadlock in...

EUVD-2026-23960

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-29646

In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...

CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-40572

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...