Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142706 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelis...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142684 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143040 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series ocfs2/dlm: bound peer-controlled...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142698 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142487 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143101 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142517 advisory. In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the receiv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143112)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143112 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142728 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer...

CentOS Linux 7.9 [CIQ] Security Update: bpftool / kernel / kernel-abi-whitelists / kernel-debug / etc Multiple Vulnerabilities (ciqsa-2026_1657)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261657 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ CentOS Bridge 7.9. It addresses 4 CVEs: CVE-2026-74705, CVE-2026-99999, CVE-2026-6400...

AlmaLinux 8 : kernel (ALSA-2026:87375)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87375 advisory. kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_85774)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685774 advisory. kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-5319...

CLSA-2026-1791878869 Fix of 274 CVEs

CVE-2026-53091 - xfrm: Don't clobber inner headers when already set CVE-2026-53091 - net: account for encap headers in qdisc pkt len CVE-2026-53091 CVE-2026-93803 - wifi: libipw: fix key index receive bound checks CVE-2026-93803 CVE-2026-93286 - net: appletalk: fix NULL pointer dereference in...

CLSA-2026-1791132078 Fix of 160 CVEs

CVE-2026-64375 - proc: protect ptracemayaccess with execupdatelock FD links CVE-2026-64375 - exec: Add execupdatemutex to replace credguardmutex CVE-2026-64375 CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent...

SUSE CVE-2026-98553

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...

SUSE CVE-2026-98616

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...

SUSE CVE-2026-98641

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves all callee-saved registers, so buildprologue takes the exceptioncb path and never calls pushcalleeregs. That is the only...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98815

In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in 0 - the code there is heavily based on the NVMe code. Currently the NS head .open and .release fileoperations methods take and put a...

CLSA-2026-1789373487 Fix of 123 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...