Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000259 advisory. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaserusb/kvaserusbleaf.c driver, a...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-116 (ALASKERNEL-5.4-2025-116)

The version of kernel installed on the remote host is prior to 5.4.254-169.358. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-116 advisory. A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss ...

Important: kernel

Issue Overview: A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. CVE-2023-20588 In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if deviceadd fails CVE-2023-53174 I...

Linux Distros Unpatched Vulnerability : CVE-2022-50876

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: musb: Fix musbgadget.c rxstate overflow bug The usb function device call musbgadgetqueue adds the passed request to musbep::reqlist,If the request-length...

Amazon Linux 2 : grub2, --advisory ALAS2-2025-3107 (ALAS-2025-3107)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3107 advisory. A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS...

PT-2026-8216

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ALSA subsystem related to USB audio handling. Specifically, an issue exists where the number of frames calculated for data URBs can exceed the...

PT-2026-6159

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ALSA subsystem, specifically in the snd usb mixer free function. When snd usb create mixer fails, the function frees mixer-id elems but the...

PT-2026-5540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s etas es58x CAN driver where a partial allocation of RX URBs could lead to a memory leak. Specifically, the es58x alloc rx urbs function, when failing ...

PT-2026-27656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to Near Field Communication NFC functionality using the PN533 driver. Specifically, the driver fails to properly release a reference to the USB...

PT-2026-27699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where interrupt urb messages of incorrect length are not properly handled. Specifically, the code does not correctly detect and reject short interrupt...

PT-2026-6150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a memory leak can occur within the mcba usb read bulk callback function. This is due to the USB framework unanchoring URBs before the completion...

PT-2026-6131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the kvaser usb module. Specifically, the issue occurs within the kvaser usb read bulk callback function when handling USB-in transfers. The URB...

PT-2026-6145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the esd usb read bulk callback function. This issue occurs because the USB framework unanchors URBs before the completion function is called,...

PT-2026-6178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the usb 8dev read bulk callback function within the usb 8dev driver of the Linux kernel. This issue occurs because the USB framework unanchors URBs before the...

PT-2026-6128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the ems usb read bulk callback function. This issue occurs because the USB framework unanchors URBs before the completion function is called,...

PT-2026-8150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s CAN Controller Area Network subsystem, specifically within the gs usb receive bulk callback function. A commit introduced an issue where a failing...

PT-2026-2939

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description FreeRDP, a free implementation of the Remote Desktop Protocol, contains a flaw where the URBDRC client does not validate server-provided MSUSB INTERFACE DESCRIPTOR values. This lack of bounds checki...

PT-2026-8196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Realtek r8152 USB network adapter can trigger a device reset during the reset process, potentially leading to a deadlock. This occurs because the rtl8152 resume function calls reset...

CVE-2023-54213

In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the sisusbvga driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 26 at...

SUSE CVE-2022-50829

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb It is possible that skb is freed in ath9khtcrxmsg, then usbsubmiturb fails and we try to free skb again. It causes use-after-free bug. Moreover, if allocskb fails,...