Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-091338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091338 advisory. libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868. Tenable has extracted the preceding...

UBUNTU-CVE-2026-72263

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fix memory leak in sndsofloadtopology When the topology filename contains "dummy" and tplgcnt is 0, the function returns -EINVAL directly without freeing the tplgfiles allocated by kcalloc at line 2497. This...

UBUNTU-CVE-2026-74308

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...

UBUNTU-CVE-2026-74302

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix UAF in hciunregisterdev hciunregisterdev does not disable cmdtimer and ncmdtimer before the hcidev structure is freed. If a timeout fires during device teardown, the callback dereferences freed memory...

UBUNTU-CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...

ALSA-2026:55541 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

UBUNTU-CVE-2026-72081

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...

UBUNTU-CVE-2026-72088

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If physdisk-inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG...

UBUNTU-CVE-2026-72384

In the Linux kernel, the following vulnerability has been resolved: irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using irqsetchainedhandleranddata, but the remove function does not clear this handler. Thi...

UBUNTU-CVE-2026-72394

In the Linux kernel, the following vulnerability has been resolved: hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeedtachvaltorpm function calculates the fan RPM using the tachometer value. However, it does no...

UBUNTU-CVE-2026-72008

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

UBUNTU-CVE-2026-72314

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulatorlocktwo should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what wwmutexlock actually returns and what every other deadlock check in this file already uses. Function regulatorlocktwo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100719 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100736 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistentramsaveold persistentramsaveold can be called multip...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100375 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in initcard The loop creates a whitespace-stripped copy...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100553 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099725 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100345 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iiodeviceregister to correct location iiodeviceregister should be at the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099693)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099693 advisory. In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100181 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decodechooseargs A message of type CEPHMSGOSDMAP contai...