Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414448 advisory. drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release. Tenable has extracted the preceding description block directly from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986434 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix GPF in diFree Avoid passing inode with JFSSBIinode-isb-ipimap == NULL to diFree1. GFP wi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987276)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987276 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in addinoderef Line 1169 3 allocates a memory chunk for victimname by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986963 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattrset|get and listxattr operations UBIFS may occur some problems with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414301 advisory. A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390379 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382521 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414410 advisory. A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System JFSin the Linux kernel. This could allow a local attacker to crash the system or...

kernel: smb: client: fix use-after-free in cifs_oplock_break

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak leading to a use-after-free of the cinode structure when unmounting: cifsoplockbreak cifsFileInfoputcfile cifsFileInfoputfinal...

kernel: smb: client: fix use-after-free in cifs_oplock_break

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak leading to a use-after-free of the cinode structure when unmounting: cifsoplockbreak cifsFileInfoputcfile cifsFileInfoputfinal...

RockyLinux 10 : kernel (RLSA-2025:9348)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9348 advisory. kernel: proc: fix UAF in procgetinode CVE-2025-21999 kernel: ext4: fix off-by-one error in dosplit CVE-2025-23150 kernel: ext4: ignore xattrs past end...

CVE-2023-53536

In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still in-use due to a bug or that -keyslotevict failed, it currently just returns while leaving the key linked into the keyslot management...

CVE-2022-50485

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode There are many places that will get unhappy and crash when ext4iget returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, becaus...

UBUNTU-CVE-2022-50485

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode There are many places that will get unhappy and crash when ext4iget returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, becaus...

CVE-2023-53536 blk-crypto: make blk_crypto_evict_key() more robust

In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still in-use due to a bug or that -keyslotevict failed, it currently just returns while leaving the key linked into the keyslot management...

CVE-2023-53536

CVE-2023-53536 affects the Linux kernel in the blk-crypto subsystem. The issue stems from blk_crypto_evict_key() sometimes returning early without unlinking the key from the keyslot management structures, while the caller proceeds to free the blk_crypto_key. This mismatch can cause a use-after-fr...

CVE-2022-50485 ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode There are many places that will get unhappy and crash when ext4iget returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, becaus...

CVE-2022-50485 ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode There are many places that will get unhappy and crash when ext4iget returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, becaus...

CVE-2022-50485

The CVE-2022-50485 entry concerns the Linux kernel ext4 subsystem. A new EXT4_IGET_BAD flag is added to ext4_iget() to prevent returning a bad inode; previously, boot loader inodes could be returned as bad inodes, bypassing some checks and potentially causing a kernel panic. The mitigation is a p...

CVE-2022-50485: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode There are many places that will get unhappy and crash when ext4iget returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, becaus...