Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099891 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in sndpcmdrain In the drain loop, the loca...

ROS-20260803-73-0022

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `cros_ec_codec_platform_probe()` function in the `sound/soc/codecs/cros_ecCodec.c` module allows a hacker to cause a system failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the croseccodecplatformprobe function in the sound/soc/codecs/crosecCodec.c module, which is part of the Linux operating system’s SoC audio support, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fcp_avcTransaction() function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the fcpavcTransaction function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `tx_macro_put_dec_enum()` function in the `sound/soc/codecs/lpass-tx-macro.c` module exposes the confidentiality, integrity, and accessibility of protected information within the Linux SoC kernel’s audio support mechanism. This vulnerability can be exploited by attackers to compromise these security aspects.

The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the snd_ac97_dev_register() function in the sound/pci/ac97/ac97_codec.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the sndac97devregister function in the sound/pci/ac97/ac97codec.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the snd_dma_wc_alloc() function in the sound/core/memalloc.c module, which supports Linux’s kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the snddmawcalloc function in the sound/core/memalloc.c module, which is part of Linux’s kernel-based audio card support mechanism, is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tas2563_save_calibration() function in the sound/hda/codecs/side-codecs/tas2781_hda_i2c.c module of the Linux kernel’s audio subsystem allows a hacker to trigger a service failure.

The vulnerability of the tas2563savecalibration function in the sound/hda/codecs/side-codecs/tas2781hdai2c.c module of the Linux kernel’s audio subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the snd_pcm_lib_free_pages() function in the sound/core/pcm_memory.c module allows a hacker to cause a service failure in Linux-based systems.

The vulnerability of the sndpcmlibfreepages function in the sound/core/pcmmemory.c module, which is part of Linux’s kernel-based audio card support, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the memory_info_update() function in the sound/soc/sof/debug.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memoryinfoupdate function in the sound/soc/sof/debug.c module related to the Linux operating system’s SoC audio support involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the test_format_fill_silence() function in the sound/core/sound_kunit.c module, which supports Linux kernel-based audio cards, allows a hacker to trigger a service failure.

The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989045 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989392 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...

The vulnerability of the `snd_pcm_lib_preallocate_proc_write()` function in the `sound/core/pcm_memory.c` module, which is part of Linux’s kernel-based audio card support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sndpcmlibpreallocateprocwrite function in the sound/core/pcmmemory.c module, which is part of Linux’s audio card support, relates to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the sof_ipc4_get_input_pin_audio_fmt() function in the audio subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sofipc4getinputpinaudiofmt function in the sound/soc/sof/ipc4-topology.c file of the Linux kernel’s audio subsystem is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2022-20562

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2022-20464

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

The vulnerability of the SNDCTL_DSP_SYNC ioctl function in the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the SNDCTLDSPSYNC ioctl function in the Linux kernel’s audio subsystem is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s sound subsystem allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel audio subsystem is related to incorrect handling of parallel calls to the PCM hwparams function. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Google Android Kernel Audio Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Kernel Audio is one of the kernel audio components. A security vulnerability exists in the Kernel Audio component of Android. An attacker can exploit this vulnerability to elevate...