Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005474 advisory. A flaw possibility of memory leak in the Linux kernel cpuentryarea mapping of X86 CPU data to memory was found in the way user can guess location of exception stacks...

Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.109/110 for Windows/Mac and 145.0.7632.109 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: uprobes: The shared zeropage was rejected in uprobewriteopcode. The following crashes were triggered in syzkaller tests: - BUG: Bad page state in process syz.7.38, pfn:1eff3 Page: refcount:0, mapcount:0,...

Stable Channel Update for Desktop

The Stable channel has been updated to 144.0.7559.96/.97 for Windows/Mac and 144.0.7559.96 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001097 advisory. The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service system crash via a crafted applicati...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003820 advisory. A memory leak in the rsisendbeacon function in drivers/net/wireless/rsi/rsi91xmgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004386 advisory. In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001643)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001643 advisory. sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001582 advisory. The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003949 advisory. In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000694 advisory. The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003391 advisory. The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obta...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002025 advisory. Array index error in the kvmvmioctlcreatevcpu function in virt/kvm/kvmmain.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002352 advisory. The udpv6pushpendingframes function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002797 advisory. A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function getnetnsbyid in net/core/netnamespace.c...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

CVE-1999-0409

Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...

CVE-1999-0431

Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000411 advisory. usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000376 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...