8557 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989029 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988823)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988823 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990054)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990054 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency i...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989787)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989787 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989895)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989895 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988971)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988971 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: Fix refcount leak in axxiabootsecondary offindcompatiblenode returns a node pointer with...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989971)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989971 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing ofnodeput after offindcompatiblenode offindcompatiblenode will increment t...
kernel security update
4.18.0-553.82.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: The LIFO ordering during kmaplocal operations was corrected for the CONFIGHIGHPTE configuration. In the CONFIGHIGHPTE configuration on 32-bit ARM processors, the movepagespte function maps PTE pages using...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa – Replaced the mutex with a rwlock to avoid sleep in atomic contexts. The current use of a mutex to protect access to the notifier hashtable can lead to issues in atomic contexts. This results in the following...
Astra Linux – Vulnerability in Firefox, Thunderbird
On arm64, an WASM brtable instruction with many entries could cause the label to be too far away from the instruction, leading to truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: perf: Fixed the issue with sample generation versus doexit. Baisheng Gao reported a crash in ARM64 mode. Mark interpreted this as a synchronous external abort—most likely due to attempting to access MMIO in a faulty way. The...
USN-7835-4 linux-hwe-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7835-4: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7833-4: Linux kernel (GCP) vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...
KVM: arm64: Prevent access to vCPU events before init
...
EUVD-2025-36976
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...
CVE-2025-40102
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...
CVE-2025-40102
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...