Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131742 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smctcpsynrecvsock Syzkaller reported a panic in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131776 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131744 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131757 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64mmcontextput without holding ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131745 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131761 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131780 advisory. In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from pagepool When the skb is reorganized during espoutput...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131769 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATEBVi in guest XSAVE state whenever XFDi=1 When loading guest XSAVE state via...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131722 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131758 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfdstate in sync with MSRIA32XFD Commit 672365477ae8 x86/fpu: Update XFD state wher...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131731 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131727 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the off + sizeofstruct...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130357 advisory. ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gvfs (UTSA-2026-130161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130161 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130355 advisory. Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130361 advisory. Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST...

Unity Linux 20.1070e Security Update: busybox (UTSA-2026-130404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130404 advisory. A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script. Tenabl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tftp (UTSA-2026-130162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130162 advisory. A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kbd (UTSA-2026-130164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130164 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage,...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130368 advisory. Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable has...