CVE-2023-53660: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, cpumap: Handle skb as well when clean up ptrring The following warning was reported when running xdpredirectcpu with both skb-mode and stress-mode enabled: ------------ cut here ------------ Incorrect XDP memory type...

CVE-2022-50536: Double Free

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...

CVE-2023-53634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987373 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fail...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986812 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414672 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out- of-bounds speculation on pointer arithmetic, leading to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-411908)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411908 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuse...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381272)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381272 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an KMSAN: uninit-value warning 1, whi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987044 advisory. In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpfjitbinaryfree function requires a non-NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987002 advisory. In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memory leak from perfenvinsertbtf perfenvinsertbtf doesn't insert if a duplicate...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414656 advisory. In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System executi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986714 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fix potential memory leak about jitdata Make sure to free jitdata through kfree in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414610 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-390385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390385 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414518 advisory. The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414616 advisory. An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414389 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function followpagepte of the file mm/gup.c of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986569 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check on 32-bit arches The stackmap code relies on rounduppowoftwo to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414602 advisory. In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF progra...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414585 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...