Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990832 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest...

kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpurun loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpurun loop to fix a bug where KVM can load hardware with a stale...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

Unbreakable Enterprise kernel security update

5.4.17-2136.349.3.1 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38604171 CVE-2025-39973 5.4.17-2136.349.3 - Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' Jakub Kicinski Orabug:...

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1234863. CVE-2024-57891: schedext: Fix invalid irq restore in scxopsbypass...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990426 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Linux arch/riscv/kvm/vmid.c DoS

The vulnerability in the arch/riscv/kvm/vmid.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989195 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988815 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990192 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989694 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guestirq is coming from KVMIRQFD API call, it m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990059 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

Linux Kernel KVM Hypercall4 Buffer Overflow DoS

The vulnerability of the kvmhypercall4 function in the arch/x86/include/asm/kvmpara.h module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access protected informatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989914 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest In commit 10d91611f426 powerpc/64s:...

Ubuntu: Security Advisory (USN-7854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: atlantis, aws-s3-controller, rancher-helm, aws-node-termination-handler, minio-object-browser-fips, conjur-cli, envconsul, fulcio, mc-fips, knative-serving-fips, pvc-autoresizer, stern, tigera-operator, cloudbeat, cloudbeat-fips, velero-plugin-for-aws-fips, ini-file,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: atlantis, aws-s3-controller, rancher-helm, aws-node-termination-handler, minio-object-browser-fips, conjur-cli, envconsul, fulcio, mc-fips, knative-serving-fips, pvc-autoresizer, stern, tigera-operator, cloudbeat, cloudbeat-fips, velero-plugin-for-aws-fips, ini-file,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: atlantis, aws-s3-controller, rancher-helm, aws-node-termination-handler, minio-object-browser-fips, conjur-cli, envconsul, fulcio, mc-fips, knative-serving-fips, pvc-autoresizer, stern, tigera-operator, cloudbeat, cloudbeat-fips, velero-plugin-for-aws-fips, ini-file,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: atlantis, aws-s3-controller, rancher-helm, aws-node-termination-handler, minio-object-browser-fips, conjur-cli, envconsul, fulcio, mc-fips, knative-serving-fips, pvc-autoresizer, stern, tigera-operator, cloudbeat, cloudbeat-fips, velero-plugin-for-aws-fips, ini-file,...