Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407380 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect reduction of reference counts on the wrong path, which could lead to permanent locking of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987052 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in hasexternalpci foreachpcidev is implemented by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986851 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414423 advisory. Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987165)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987165 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986817 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on createrprocess and devicerelease Do not remove the map from th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986642 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmelnandcontrollerinit The reference counting issue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986827 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix deadlock in nilfscountfreeblocks A semaphore deadlock can occur if nilfsgetblock...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986846 advisory. In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak foreachpcidev is implemented by pcigetdevice...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987399 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues The cited commit creates child PKEY...

CVE-2025-59830

Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its paramslimit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the InternReadFile function in importer that reads the number of materials numMats directly from the input file without validation. An attacker can exhaust system resources by...

CVE-2023-53609

In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed" The "atomicinc&cmd-device-iorequestcnt" in scsiqueuerq would cause kernel panic because cmd-device may be freed after returning from...

CVE-2023-53597

In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection. But we do not return the mi...

CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

CVE-2023-53585

In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk = somelookupfunc bpfskassignskb, sk bpfskreleasesk That is, the sk is not consumed by bpfskassign. The function therefore needs to make...

UBUNTU-CVE-2023-53590

In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctpstreampriorities to avoid a nested loop With this refcnt added in sctpstreampriorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio ...

CVE-2023-53609

CVE-2023-53609 affects the Linux kernel in the SCSI subsystem. The vulnerability stems from a change where scsi_queue_rq() could execute atomic_inc(&cmd->device->iorequest_cnt) after scsi_dispatch_cmd(), risking a kernel panic if cmd->device was freed. The issue has been addressed by rev...

CVE-2023-53609 scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"

In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed" The "atomicinc&cmd-device-iorequestcnt" in scsiqueuerq would cause kernel panic because cmd-device may be freed after returning from...