Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013149 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9kwmictrlrx For the reasons also described in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007541 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pktlen Syzbot found an issue 1: fqcodeldrop try to drop ...

PT-2026-51985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the handling of Generic Segmentation Offload GSO packet headers. The qdisc pkt len segs init function fails to properly pull headers into the expected memory location,...

EUVD-2020-31212

Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a...

PT-2026-30209

Name of the Vulnerable Software and Affected Versions HiOS versions prior to 08.1.00 HiOS versions prior to 07.1.01 Description A denial of service issue exists in the EtherNet/IP stack due to improper handling of packet length fields. Remote attackers can cause the device to crash or hang by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005558 advisory. In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-l...

PT-2026-36414

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential out-of-bounds read exists in the iwl mvm nd match info handler function. The memcpy function assumes the dynamic array notif-matches is at least as large as the number of byt...

CVE-2025-59482

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet containing a field whose length exceeds the maximum expected...

SUSE CVE-2026-24883

In GnuPG before 2.5.17, a long signature packet length causes parsesignature to return success with sig-data set to a NULL value, leading to a denial of service application crash...

CVE-2026-24883

In GnuPG before 2.5.17, a long signature packet length causes parsesignature to return success with sig-data set to a NULL value, leading to a denial of service application crash...

CVE-2026-24883

In GnuPG before 2.5.17, a long signature packet length causes parsesignature to return success with sig-data set to a NULL value, leading to a denial of service application crash...

CVE-2026-24883

In GnuPG before 2.5.17, a long signature packet length causes parsesignature to return success with sig-data set to a NULL value, leading to a denial of service application crash...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003551 advisory. In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the sctpmakechunk function net/sctp/smmakechunk.c when handling...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002115 advisory. drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users t...

PT-2026-5011

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.5.17 Description A long signature packet length can cause the parse signature function to return success while setting the sig-data pointer to a NULL value. This results in a denial of service, specifically an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992762 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb-len Packet length retrieved from descriptor may be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992763 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pktlen Syzbot found an issue 1: fqcodeldrop try to drop ...

EUVD-2023-60504

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9kwmictrlrx For the reasons also described in commit b383e8abed41 "wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg", ath9khtcrxmsg should validate pktlen before accessing...

CVE-2023-54300

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9kwmictrlrx For the reasons also described in commit b383e8abed41 "wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg", ath9khtcrxmsg should validate pktlen before accessing...

CVE-2023-54300

CVE-2023-54300 affects the Linux kernel wireless driver stack (ath9k). The issue arises from uninitialized memory access in ath9k_wmi_ctrl_rx triggered by missing pkt_len validation in ath9k_htc_rx_msg; the SKB could be malformed such that a WMI header is expected in data but not present. The fix...