UBUNTU-CVE-2026-23248

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perfmmap Syzkaller reported a refcountt: addition on 0; use-after-free warning in perfmmap. The issue is caused by a race condition between a failing mmap setup and a concurrent mm...

kernel: svcrdma: use rc_pageoff for memcpy byte offset

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rcpageoff for memcpy byte offset svcrdmacopyinlinerange added rccurpage page index to the page base instead of the byte offset rcpageoff. Use rcpageoff so copies land within the current page. Found by ZeroPath...

CVE-2025-38693 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38693 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

scsi: qla2xxx: Fix bsg_done() causing double free

...

SUSE CVE-2026-23234

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fswriteendio As syzbot reported an use-after-free issue in f2fswriteendio. It is caused by below race condition: loop device umount - workerthread - loopprocesswork - doreqfilebacked - lorwaio -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005766 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of function...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005682 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix warning - do not call blocking ops when !TASKRUNNING vub300enablesdioirq works...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005626 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005597)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005597 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes code is broken for big-endia...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005624 advisory. In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix fout leak in hbm's runbpfprog Fix fout being fopen'ed but then not subsequently...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005676 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005797 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are...

EUVD-2026-9407

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fs sysfs attributes suffer from out-of-bounds memory access and incorrect handling of integer values whose size is not 4 bytes. For example: vm: echo 65537...

UBUNTU-CVE-2026-23232

In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fsenablecheckpoint" This reverts commit 196c81fdd438f7ac429d5639090a9816abb9760a. Original patch may cause below deadlock, revert it. write remount - writebegin - lockpage --- lock A -...

CVE-2026-23234 f2fs: fix to avoid UAF in f2fs_write_end_io()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fswriteendio As syzbot reported an use-after-free issue in f2fswriteendio. It is caused by below race condition: loop device umount - workerthread - loopprocesswork - doreqfilebacked - lorwaio -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005449 advisory. In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005741 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Free memory for tmpfile name When opening a ubifs tmpfile on an encrypted directory,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005404)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005404 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix BUGON condition in btrfscancelbalance Pausing and canceling balance can race to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005521 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipcaeadencryptdone Syzbot reported a slab-use-after-fr...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005434 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct...