Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-409370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409370 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-360474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-360474 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987111 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by...

PT-2025-46090

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449546226 Crash type: Use-of-uninitialized-value Crash state: HasAlpha32b SSE2 WebPPictureHasTransparency VP8LEncodeImage...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the connection tracking module incorrectly handling the ct-timeout value, which could result in an abnormal...

CVE-2022-50546: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4evictinode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4evictinode+0xdd/0x26b0 fs/ext4/inode.c:180...

CVE-2023-53635: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct-timeout value struct nfconn-timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized bchbtreenodealloc return value, which could result in a null pointer dereference...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked krealloc return value in the ext4fcrecordregions function, which could lead to a memory leak...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked kmalloc return value, which could result in a null pointer dereference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987314 advisory. In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign newroot only when removal succeeds removeraw in dmbtreeremove may fail du...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414413)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414413 advisory. Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407733 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987283 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987247 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986410 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the ISERRORNULL return value, which could result in a null pointer dereference...

php:php-fuzz-execute: Use-of-uninitialized-value in find_implicit_binds_recursively

Detailed Report: https://oss-fuzz.com/testcase?key=5868110864515072 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: findimplicitbindsrecursively...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Use-of-uninitialized-value in ff_vvc_coding_tree_unit

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5600497089445888 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

libwebp:[email protected]: Use-of-uninitialized-value in HasAlpha32b_SSE2

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4753824549240832 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...