An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003936 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    staging: greybus: audio_helper: remove unused and wrong debugfs usage

    In the greybus audio_helper code, the debugfs file for the dapm has the     potential to be removed and memory will be leaked.  There is also the     very real potential for this code to remove ALL debugfs entries from the     system, and it seems like this is what will really happen if this code     ever runs.  This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan     of it.

    So remove all of the debugfs logic from the audio_helper code as there's     no way it could be correct.  If this really is needed, it can come back     with a fixup for the incorrect usage of the debugfs_lookup() call which     is what caused this to be noticed at all.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - staging: greybus: audio_helper: remove unused and wrong debugfs usage In the greybus audio_helper code,     the debugfs file for the dapm has the potential to be removed and memory will be leaked. There is also the     very real potential for this code to remove ALL debugfs entries from the system, and it seems like this is     what will really happen if this code ever runs. This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan of it. So remove all of the debugfs     logic from the audio_helper code as there's no way it could be correct. If this really is needed, it can     come back with a fixup for the incorrect usage of the debugfs_lookup() call which is what caused this to     be noticed at all. (CVE-2022-50400)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992250 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    staging: greybus: audio_helper: remove unused and wrong debugfs usage

    In the greybus audio_helper code, the debugfs file for the dapm has the     potential to be removed and memory will be leaked.  There is also the     very real potential for this code to remove ALL debugfs entries from the     system, and it seems like this is what will really happen if this code     ever runs.  This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan     of it.

    So remove all of the debugfs logic from the audio_helper code as there's     no way it could be correct.  If this really is needed, it can come back     with a fixup for the incorrect usage of the debugfs_lookup() call which     is what caused this to be noticed at all.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	8/26/2026	high
288207	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003936)	Nessus	Unity Linux Local Security Checks	1/16/2026	1/17/2026	medium
265917	Linux Distros Unpatched Vulnerability : CVE-2022-50400	Nessus	Misc.	9/25/2025	7/17/2026	medium
280247	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992250)	Nessus	Unity Linux Local Security Checks	12/30/2025	12/30/2025	medium

Detections

Analytics

Plugins Search

high

medium

medium

medium