SUSE CVE-2025-40164

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.82 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.82 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

drm/vmwgfx: Fix a null-ptr access in the cursor snooper

...

EUVD-2025-124916

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

EUVD-2025-124959

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC III Anthony Yznaga tracked down that a BUGON in ext4 code with large folios enabled resulted from copyfromuser returning impossibly large values greater tha...

CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

RHSA-2025:21068 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update

Bulletin has no description...

CVE-2025-40167 ext4: detect invalid INLINE_DATA + EXTENTS flag combination

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

CVE-2025-40124

CVE-2025-40124 concerns a Linux kernel vulnerability affecting SPARC/UltraSPARC III platforms where copy_from_user() could return an impossibly large value, triggering a BUG_ON in ext4 when large folios are enabled. The root cause is the exception handling in copy_from_user/copy_to_user returns i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990869 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb-sk in ipvlanprocessv4,6outbound Raw packet from PFPACKET socket ontop of an...

RHEL 9 : kernel (RHSA-2025:21051)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21051 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: Fix semi-unbounded...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990771 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUGON when directory entry has invalid reclen The reclen field in the directory entry h...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990863)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990863 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUGONrefs == 0, which...

kernel: blk-cgroup: Fix UAF in blkcg_unpin_online()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf has a BUGON that can trigger with the following: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo...

ALBA-2025:20841 Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20023-1 Rating: important References: bsc1252881 Cross-References: CVE-2025-12428 CVE-2025-12429 CVE-2025-12430 CVE-2025-12431 CVE-2025-12432...

Security update for MozillaThunderbird (important)

openSUSE security update: security update for mozillathunderbird ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20006-1 Rating: important References: bsc1249391 Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532...