kernel: KVM: arm64: Tear down vGIC on failed vCPU creation

A use-after-free flaw was found in KVM for arm64 in the Linux Kernel, if the kvmarchvcpucreate fails to share the vCPU page with the hypervisor. This vulnerability could even lead to a kernel information leak problem...

kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix softlockup in arenamapfree on 64k page kernel On an aarch64 kernel with CONFIGPAGESIZE64KB=y, arenahtab tests cause a segmentation fault and soft lockup. The same failure is not observed with 4k pages on aarch64. It turn...

kernel: KVM: arm64: Tear down vGIC on failed vCPU creation

A use-after-free flaw was found in KVM for arm64 in the Linux Kernel, if the kvmarchvcpucreate fails to share the vCPU page with the hypervisor. This vulnerability could even lead to a kernel information leak problem...

Incorrect Secure Flag Usage in Versal™ Adaptive SoC Arm® Trusted Firmware

Summary The Secure Flag passed to Versal™ Adaptive SoC’s Arm Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appea...

Missing Use of the Secure Flag in Zynq™ UltraScale+™ SoC Trusted Firmware

Summary A researcher reported that the security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability turn on and off subsystems within the SoC...

OESA-2025-2636 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989259 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: meson: Fix refcount leak in mesonsmppreparecpus offindcompatiblenode returns a node pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989583 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989339 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to use a PLT entry to call an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990095 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: versatile: Add missing ofnodeput in dcscbinit The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989618 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989639 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: fix possible null-ptr-deref in armsmmudeviceprobe It will cause null-ptr-deref wh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988922 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocol...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988796 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing ofnodeput after offindcompatiblenode offindcompatiblenode will increment t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988823 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989958 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: versatile: Add missing ofnodeput in dcscbinit The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989029 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989971 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing ofnodeput after offindcompatiblenode offindcompatiblenode will increment t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989895 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990054 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency i...