Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

The vulnerability of the ath12k_ce_free_pipes() function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kcefreepipes function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability...

The vulnerability of the apparmor/resource.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the component drivers/media/usb/pvrusb2/pvrusb2-hdw.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/usb/pvrusb2/pvrusb2-hdw.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arizona-core.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arizona-core.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the auth_gss.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the authgss.c component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/client/smb2file.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/client/smb2file.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability in the driver/remoteproc/imx_rproc.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/remoteproc/imxrproc.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/media/PCI/CX25821/CX25821-core.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/pci/cx25821/cx25821-core.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of APEI/GHES components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of APEI/GHES components in Linux operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dm-rq.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dm-rq.c component in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100771 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dllchange check The code checking whether the specified memory timing...

ALSA-2026:55765 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write ...

PT-2026-76847

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100546 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100731 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenetputtxcb The writeptr points to the next open txcb. We wa...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp CVE-2026-43216 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-43329 In the...

RHEL 9 : bind (RHSA-2026:55441)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55441 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

CVE-2026-68004

An issue in OSSRS SRS Simple Realtime Server...

PT-2026-73394

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...