USN-7861-1: Linux kernel vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7861-1 linux, linux-aws, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-lowlatency vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

PT-2026-30155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Bluetooth L2CAP implementation, specifically within the l2cap unregister user function. A race condition occurs because l2cap register user and l2cap...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990617 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintelreadversion If hcicmdsynccomplete is triggered a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990626 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field s...

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988657 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989860 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintelreadversion If hcicmdsynccomplete is triggered a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988772 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date-evtskb is NULL check fix crash because of null pointers 6104.969662 BU...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990213)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990213 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity During our fuzz testing of the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989210 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989963 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field s...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988913 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989899 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when btinit fails btinit calls btledsinit to register led, but if ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990098 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990338 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintelreadversion If hcicmdsynccomplete is triggered a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990155 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990141 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date-evtskb is NULL check fix crash because of null pointers 6104.969662 BU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990267 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate btsockalloc...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989060 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause...