CVE-2022-50855 bpf: prevent leak of lsm program after failed attach

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...

CVE-2022-50816 ipv6: ensure sane device mtu in tunnels

In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report 1 with no reproducer hints at a bug in ip6gre tunnel dev:ip6gretap0 Since ipv6 mcast code makes sure to read dev-mtu once and applies a sanity check on it see commit...

CVE-2022-50812 security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIGZEROCALLUSEDREGS to gcc or clang 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences see the links above the check for more information. Restrict...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992372 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore it...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992506 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting panfrostgemcreatewithhandle previously returne...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992470 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid With clang's kernel control flow...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992293 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992499 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992526 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmapzalloc must be balanced by a correspondi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992240 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: make sure skb-len != 0 when redirecting to a tunneling device syzkaller managed to trigger...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992660 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 main...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992484 advisory. In the Linux kernel, the following vulnerability has been resolved: rpmsg: qcomsmd: Fix refcount leak in qcomsmdparseedge ofparsephandle returns a node pointer with...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992317 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead ftracestartup does...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992283 advisory. In the Linux kernel, the following vulnerability has been resolved: md: Replace snprintf with scnprintf Current code produces a warning as shown below when total...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992589 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992637 advisory. In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992614 advisory. In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992540 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvbunregisterdevice is known that prone to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992462 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel wi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992191 advisory. In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not contain an...