Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1234863. CVE-2024-57891: schedext: Fix invalid irq restore in scxopsbypass...

Linux arch/riscv/kvm/vmid.c DoS

The vulnerability in the arch/riscv/kvm/vmid.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990426 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Linux Kernel KVM Hypercall4 Buffer Overflow DoS

The vulnerability of the kvmhypercall4 function in the arch/x86/include/asm/kvmpara.h module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access protected informatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988815 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990192 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989694 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guestirq is coming from KVMIRQFD API call, it m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989195 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989914 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest In commit 10d91611f426 powerpc/64s:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990059 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

Ubuntu: Security Advisory (USN-7854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: extism, cephcsi-fips, prometheus-snmp-exporter, smarter-device-manager-fips, knative-serving-fips, cilium-certgen, aws-privateca-issuer-fips, prometheus-podman-exporter, dynamic-localpv-provisioner, wait-for-port, chartmuseum, aws-iam-authenticator, fulcio, nats,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: extism, cephcsi-fips, prometheus-snmp-exporter, knative-serving-fips, cilium-certgen, aws-privateca-issuer-fips, prometheus-podman-exporter, dynamic-localpv-provisioner, wait-for-port, chartmuseum, aws-iam-authenticator, fulcio, nats, terraform-provider-azuread, vaul...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: extism, cephcsi-fips, prometheus-snmp-exporter, smarter-device-manager-fips, knative-serving-fips, cilium-certgen, aws-privateca-issuer-fips, prometheus-podman-exporter, dynamic-localpv-provisioner, wait-for-port, chartmuseum, aws-iam-authenticator, fulcio, nats,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: extism, cephcsi-fips, prometheus-snmp-exporter, knative-serving-fips, cilium-certgen, aws-privateca-issuer-fips, prometheus-podman-exporter, dynamic-localpv-provisioner, wait-for-port, chartmuseum, aws-iam-authenticator, fulcio, nats, terraform-provider-azuread, vaul...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: A stack overflow issue was fixed when loading vlenb. The user-space load mechanism can place up to 2048 bits into the xlen bit stack buffer. Since we only need the xlen bits, we check the size of the buffer in advanc...

SUSE CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

UBUNTU-CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...