Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987651 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987621 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987683 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987662)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987662 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix task leak in pm8001sendabortall In pm8001sendabortall, make sure to free the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987602 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987628 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbdallocconfig and module removal When nbd module is being removing,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987555 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpccall struct has a timer used to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987709 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4write and ext4convertinlinedata Hulk Robot reported a BUGON:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987629 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we shou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987517 advisory. In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987700 advisory. In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platformgetresource It will cause null-ptr-deref if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987571 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987633 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix transfer-buffer overflows The driver uses endpoint-sized USB transfer buffer...

EUVD-2025-35071

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: check p-vecbuf for NULL When the PAGEMAPSCAN ioctl is invoked with veclen = 0 reaches pagemapscanbackoutrange, kernel panics with null-ptr-deref: 44.936808 Oops: general protection fault, probably for non-canonic...

CVE-2025-40011

CVE-2025-40011 affects the Linux kernel DRM GMA500 HDMI teardown path. The vulnerability arises from a null-dereference when the driver’s pdev->driver_data is NULLed by pci_set_drvdata and then dereferenced in oaktrail_hdmi_i2c_exit to extract the i2c_dev. The underlying issue is in the sequen...

CVE-2025-40008 kmsan: fix out-of-bounds access to shadow memory

In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224kunit on a KMSAN-enabled kernel results in a crash in kmsaninternalsetshadoworigin: BUG: unable to handle page fault for address: ffffbc3840291000 PF: supervisor read...

CVE-2025-40007 netfs: fix reference leak

In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...

PT-2026-2528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the F2FS filesystem related to extent cache management. Specifically, the issue involves the potential addition of a zero-sized extent into the...

UBUNTU-CVE-2025-40001

In the Linux kernel, the following vulnerability has been resolved: scsi: mvsas: Fix use-after-free bugs in mvsworkqueue During the detaching of Marvell's SAS/SATA controller, the original code calls canceldelayedwork in mvsfree to cancel the delayed work item mwq-workq. However, if mwq-workq is...

CVE-2025-40002

CVE-2025-40002 is a Linux kernel thunderbolt use-after-free in tb_dp_dprx_work. The root cause is the use of cancel_delayed_work() in tb_dp_dprx_stop(), which may not ensure tb_tunnel->dprx_work has finished before tb_tunnel is freed, allowing a race where the delayed worker dereferences a fre...