Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988748 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Add missing ofnodeput in iommuinitearlydart The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989029 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990192 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989087 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit foreachpcidev is implemented by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989022 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in hasexternalpci foreachpcidev is implemented by...

PT-2026-1248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the iommu/amd module related to boundary checks within the iommu mmio show function. Specifically, the iommu mmio write function validates user-provid...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of “acpiid” if the “str” argument is at its maximum length...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restored the context entry setup order for aliased devices. The commit 2031c469f816 “iommu/vt-d: Added support for static identity domains” changed the context entry setup during domain attachment from a set-and-check...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vfio/pds: Fixed the missing detachioas operation. When CONFIGIOMMUFD is enabled and a device is bound to the pdsvfiopci driver, the following WARNON trace is observed, and the probe fails: WARNING: CPU: 0 PID: 5040 at...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: bnxten: Correctly sets the DMA unmap len for XDPREDIRECT. When transmitting an XDPREDIRECT packet, call dmaunmaplenset with the correct length instead of 0. This bug triggers this warning on a system with IOMMU enabled: WARNIN...

The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

CVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

CVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

UBUNTU-CVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

EUVD-2025-36470

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

CVE-2025-40058 iommu/vt-d: Disallow dirty tracking if incoherent page walk

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2025-1254)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1254 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: always use READONCE to read ring provided buffer lengths CVE-2025-39816 In the Linux kernel, the following...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: always use READONCE to read ring provided buffer lengths CVE-2025-39816 In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Return of Wrong Status Code (CVE-2024-40945)

iommu: Return right value in iommusvabinddevice iommusvabinddevice should return either a sva bond handle or an ERRPTR value in error cases. Existing drivers idxd and uacce only check the return value with ISERR. This could potentially lead to a kernel NULL pointer dereference issue if the functi...