Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990900 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990812 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is ...

SUSE-SU-2025:4058-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free qvector unless new one was allocated bsc1249847. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier...

kernel: linux/dim: Fix divide by 0 in RDMA DIM

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A divide-by-zero error can occur within the Dynamic Interrupt Moderation DIM mechanism when comparing statistics that evaluate to a zero value. A local attacker can trigger this issue during network operations to...

kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB

A flaw was found in the Linux kernel. Incorrect memory mapping of the cmd-db shared memory region as Write-Back WB instead of Write-Combine WC can lead to a Denial of Service DoS. When a hypervisor other than the Qualcomm Hypervisor is in use, the eXtended Protection Unit XPU may falsely detect...

kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmasterprobe by adding endpoint check syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver1. There is a number...

kernel: powerpc/xics: fix refcount leak in icp_opal_init()

In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node pointer with refcount incremented, use ofnodeput on it when done...

kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12kmacassignviftovdev In ath12kmacassignviftovdev, if arvif is created on a different radio, it gets deleted from that radio through a call to ath12kmacunassignlinkvif. This action...

kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write

A flaw was found in the Linux kernel's iouring subsystem. A local user with administrative privileges can cause a Denial of Service DoS by triggering a system deadlock. This issue occurs when direct input/output I/O write requests are processed during an active filesystem freeze without verifying...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

kernel: nvmet: fix out-of-bounds access in nvmet_enable_port

An out-of-bounds access vulnerability was found in the Linux kernel's nvme subsystem in the nvmetenableport function. The vulnerability can occur when a port is enabled without a transport type configured, causing the function to use the NVMFTRTYPEMAX value 255 as an array index into the...

kernel: wifi: ath12k: Fix for out-of bound access error

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer using printarraytobufindex function. Array length parameter passed to the function is too big, resulting in possible out-of bound memory error...

kernel: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is identical to the one we already have. The bug however is that we are...

kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfssysfslinkrpcclient name is char64 where the size of clnt-clprogram-name remains unknown. Invoking strcat directly will also lead to potential buffer overflow. Change them to strscpy and...

kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925changeviflinks In mt7925changeviflinks devmkzalloc may return NULL but this returned value is not checked...

kernel: mm: clear uffd-wp PTE/PMD state on mremap()

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

kernel: media: intel/ipu6: remove cpu latency qos request on error

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: remove cpu latency qos request on error Fix cpu latency qos list corruption like below. It happens when we do not remove cpu latency request on error path and free corresponding memory. 30.634378 l7 kernel:...

kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990511 advisory. In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUGON in control parser Fix a BUGON from 2009. Even if it looks unreachable I...