Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100171 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100125 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: clear isends on setup unwind The RDS IB connection teardown path is written so it can r...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory. ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100734 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free of fastrpcuser in workqueue context There is a race between...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: crypto: ccp -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100494 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099691 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101319 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, mac...

PT-2026-73396

A flaw in Node.js HTTP/2 handling allows nghttp2 session mem send to be called re-entrantly while nghttp2 session mem recv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

Important: qemu

Issue Overview: In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a client's SetPixelFormat message. These fields are received as 16-bit values but are stored internally as uint8t. A malicious VNC...

PT-2026-76844

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, can lead to unexpected proces...

The vulnerability in the driver/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099458 advisory. libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100705 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100507 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the...

RHEL 8 : kernel-rt (RHSA-2026:55765)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55765 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101169 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100493 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengineprepslavesg fai...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101087 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS...