Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003937 advisory. In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004325 advisory. In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000321 advisory. In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in...

kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr

In the Linux kernel afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free UAF in sockfssetattr. A local attacker can use this flaw to escalate privileges and take control of the system...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the afalgrelease function crypto/afalg.c in the Linux kernel is related to the ignoring of setting the NULL value in certain fields of the sockfssetattr structure. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...

Linux kernel memory misreference vulnerability (CNVD-2019-47010)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in sockfssetattr in Linux kernel versions 4.20.10 and earlier, which stems from the 'afalgrelease' function in the...

UBUNTU-CVE-2019-8912

In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfssetattr...