Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from mishandling of errors that could lead to a reference count leak...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-410356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-410356 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2ethtool.c Add error pointer check after calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987151 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4fcrecordmodifiedinode Current code does not fully takes care of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987373 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fail...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986557 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986123 advisory. Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the fail...

PT-2025-41027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a reference count leak can occur within the chameleon parse gdd function if mcb device register returns an error. Specifically, if an error occurs...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986907 advisory. In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Fix two use after free in ibmasminitone In ibmasminitone, it calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986439)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986439 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987067)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987067 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemacliteofprobe This node pointer is returned by ofparsephandle...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986405 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsihostalloc After device is initialized via deviceinitialize,...

PT-2025-41102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the bcm-qspi driver. If neither a "hif mspi" nor "mspi" resource is present, the driver exits probe prematurely but still indicates success. This...

PT-2025-41110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to error handling during MBHC Memory Block Handling Controller initialization within the wcd938x codec. Specifically, the initialization proce...

CLSA-2025-1759782399 Fix CVE(s): CVE-2025-5372

SECURITY UPDATE: improper return value handling in key derivation function - debian/patches/CVE-2025-5372.patch: reformat sshkdf to fix formatting issue with EVPKDFctrl calls - debian/patches/CVE-2025-5372-1.patch: simplify error checking and handling of return codes in sshkdf - CVE-2025-5372...

CVE-2025-58589

CVE-2025-58589 describes an information-disclosure vulnerability where errors reveal full stack traces to users, exposing internal class/method names and application structure. Connected sources confirm affected SICK products: SICK Enterprise Analytics and SICK Logistic Analytics (for example, SI...

CVE-2023-53611

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...

CVE-2023-53567

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...

CVE-2022-50484

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at th...

UBUNTU-CVE-2023-53611

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...

CVE-2023-53611 ipmi_si: fix a memleak in try_smi_init()

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...