Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414602 advisory. In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF progra...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986436 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987175 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414672 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out- of-bounds speculation on pointer arithmetic, leading to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to properly check boundaries when setting up a channel, which could lead to out-of-bounds writes...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986780 advisory. In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axichanhandleerr function Since there is no...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-388913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-388913 advisory. In the Linux kernel, the following vulnerability has been resolved: dma: xilinxdpdma: Fix locking There are several places where either chan-lock or chan-vchan.lock...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414341 advisory. An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-433453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-433453 advisory. In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon star...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986321 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414342 advisory. An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986538 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414684 advisory. A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986872 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211vifusereservedcontext, when we hav...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986747 advisory. In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1xremove' Add a missing 'host1xchannellistfree' call in th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-401856)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-401856 advisory. In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix kernel NULL pointer dereference in hvuiorescind For primary VM Bus channels,...

SUSE CVE-2025-59733

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)

Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...

CVE-2025-59733

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

DEBIAN-CVE-2025-59733

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...