Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146633 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packe...

CVE-2026-99204

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats their fields. The formatter holds dlm-spinlock, but the recovery...

PT-2026-128203

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket probe stores the return value from rocket device init in the file-scoped rdev pointer before checking whether it is an error pointer. If rocket device init fails, rdev is lef...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146814 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after...

PT-2026-128154

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt i2c probe In wmt i2c probe, i2c-clk is acquired using of clk get. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk put...

CVE-2026-99105

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix stall when a task enqueued with SCXENQLAST lands back on its CPU's local DSQ With SCXOPSENQLAST, the last runnable task on a CPU is passed to ops.enqueue instead of being kept running. Exiting tasks without...

CVE-2026-99164

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

UBUNTU-CVE-2026-99164

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

CVE-2026-99141

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in printgraphfunctionevent tracingsettracer assigns the flags of the newly selected tracer with: tr-currenttraceflags = t-flags ? : t-tracer-flags; If the new tracer defines neither static flags nor default...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146644 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size setuserbufsize computes the QP buffer size...

CVE-2026-99205: Linux: In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks…

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeuppreempt for queued tasks during class change Paul reported recent RCU changes exposed a lost resched where CPU idles with a rcutorture thread waiting while being completely runnable. Dumping the rq state at...

Linux Distros Unpatched Vulnerability : CVE-2026-99179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchqueue: Fix note pool publication race in watchqueuesetsize There is a race between watchqueuesetsize and postonenotification. watchqueuesetsize publishes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146652 advisory. In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH,...

CVE-2026-99162: Linux: In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding…

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup-devid. Fix a potential UAF by duplicating the...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_89816)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689816 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from t...

CVE-2026-99177

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sevgmempostpopulate setpagedirty requires that the caller holds some kind of lock to ensure that the page's mapping does not concurrently go away. That is not the case for a random page we got from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146877 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146873 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146678)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146678 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header...

Linux Distros Unpatched Vulnerability : CVE-2026-99178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF page not present event arrives through the PF vector, and its reason sits in the...