ALSA-2026:59737 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...

PT-2026-82128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the list:set garbage collection GC and the swap operation. The function ip set put byindex resolves an index to a set...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098869 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads uevent device...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098870)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098870 advisory. In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098747 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak...

Linux Distros Unpatched Vulnerability : CVE-2026-74748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: fix refcount race between list:set GC and swap ipsetputbyindex resolved the index to a set pointer under RCU, then took ipsetreflock in ipsetp...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098714 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098802 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098959 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098689 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: reject invalid perturb period Gerrard Tai reported that SFQ perturbperiod has n...

Linux Distros Unpatched Vulnerability : CVE-2026-80551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to...

Linux Distros Unpatched Vulnerability : CVE-2026-79017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome...

Linux Distros Unpatched Vulnerability : CVE-2026-80563

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind The trigger debugfs file has a hand-rolled -write handler triggerwrite that...

Linux Distros Unpatched Vulnerability : CVE-2026-78979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098856)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098856 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table...

Linux Distros Unpatched Vulnerability : CVE-2026-74740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling...

Linux Distros Unpatched Vulnerability : CVE-2026-78906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098933 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfeventoverflow vs perfremovefromcontext race Make sure that perfeventoverflow runs...