CLSA-2026-1768110920 kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun CVE-2025-38068 - wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work CVE-2025-39863 - NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-43945 - tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. CVE-2025-40186 - can:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001493 advisory. net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001873 advisory. The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002348 advisory. The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to...

MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.13.el7.AXS7 (AXSA:2025-10836:65)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10836:65 advisory. can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803 CVEs: CVE-2023-52922 ...

PT-2026-27727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s CAN Controller Area Network subsystem, specifically within the Broadcom CAN bcm driver. A missing spinlock initialization in the bcm rx setup function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993191 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: Fix refcount leak in bcmkonasmcinit offindmatchingnode returns a node pointer with...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992967 advisory. In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo-bcmprocread after removeprocentry. syzbot reported a warning in bcmrelease. 0...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992922 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen inste...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992453 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: Fix refcount leak in bcmkonasmcinit offindmatchingnode returns a node pointer with...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992356 advisory. In the Linux kernel, the following vulnerability has been resolved: can: bcm: bcmtxsetup: fix KMSAN uninit-value in vfswrite Syzkaller reported the following issue:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992385 advisory. In the Linux kernel, the following vulnerability has been resolved: can: bcm: bcmtxsetup: fix KMSAN uninit-value in vfswrite Syzkaller reported the following issue:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992652 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen inste...

PT-2026-37456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference can occur in the bcm vk read function. When the entry pointer is NULL and the rc variable is set to -EMSGSIZE, the system attempts to access to h msg, usr msg...

UBUNTU-CVE-2023-53986

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved instructio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990878 advisory. In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo-bcmprocread after removeprocentry. syzbot reported a warning in bcmrelease. 0...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989836 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahashhmacinit function The ahashinit functions may return...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-988586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988586 advisory. In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcmprocshow BUG: KASAN: slab-use-after-free in bcmprocshow+0x969/0xa80 Read ...

Linux Distros Unpatched Vulnerability : CVE-2023-53658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a hifmspi nor mspi resource is present, the driver will just early exit in probe...

SUSE CVE-2023-53658

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a "hifmspi" nor "mspi" resource is present, the driver will just early exit in probe but still return success. Apart from not doing anything...