Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414452 advisory. Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

leds: an30259a: Use devm_mutex_init() for mutex initialization

...

Linux service failures

The vulnerability of components such as drivers, NVMe, and host kernels in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux EFI libstub DoS

The vulnerability of the drivers/firmware/EFI/libstub components of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

amdgpu_discovery_reg_base_init Heap Buffer Overflow DoS

Vulnerability of the amdgpudiscoveryregbaseinit function in the drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c file – The drivers for AMD GPU cores in Linux operating systems are vulnerable due to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a system...

Marvell Ethernet Network Adapter Buffer Overflow

Vulnerability of the otx2setrxfhcontext function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c module – Marvell Ethernet network adapter drivers for Linux operating systems are vulnerable due to buffer overflow exploits. Exploitation of this vulnerability could allow attackers t...

drivers/scsi/libiscsi.c Heap Buffer Overflow DoS

Vulnerability of the iscsiprepbidiahs function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-50022 drivers:md:fix a potential use-after-free bug

In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if sh-batchhead && sh != sh-batchhead"...

Linux kernel Xen IRQFD_shutdown DoS

The vulnerability of the irqfdshutdown function in Xen kernel-based Linux operating system drivers is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux devfreq devfreq.c devfreq function Use-After-Free

Vulnerability of the transstatshow function in the drivers/devfreq/devfreq.c module – The drivers for dynamic voltage and frequency scaling in the Linux operating system are vulnerable to buffer overflow attacks without proper input data size checking classical buffer overflow attack. Exploiting...

Linux kernel Xen IRQFD_Wakeup DoS

The vulnerability of the irqfdwakeup function in Xen kernel-based Linux operating system drivers is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to trigger a service failure...

drivers/md/dm-Data Compromise metadata

Vulnerability of the integritymetadata function in the drivers/md/dm-integrity.c module – The Linux kernel’s driver for supporting multiple devices such as RAID and LVM is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to caus...

CROSS-PROCESS GPU MEMORY DISCLOSURE

AMD ID: AMD-SB-6019 Potential Impact: Loss of Confidentiality Severity: Medium Summary A vulnerability in the Linux® drivers for AMD GPUs could allow cross-process disclosure of GPU global memory...

Qualcomm Linux PCIe Buffer Overflow DoS

The vulnerability of the pcieaspmpmstatechange function in Qualcomm’s PCIe device drivers for Linux operating systems is related to incorrect resource serialization. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2024-3827

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description The issue is related to a NULL-pointer dereference in the kernel mode layer of the NVIDIA GPU Display Driver. This can be caused by a user in a guest...

Intel Ethernet RDMA network controller drivers for Linux Privilege Escalation

The vulnerability of Intel Ethernet RDMA network controllers’ drivers for Linux is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel(R) QAT driver security vulnerabilities

Intel QAT Drivers is a driver from Intel Corporation USA. A security vulnerability exists in IntelR QAT drivers for Linux prior to version 4.17, which stems from incorrect default permissions. An attacker can exploit the vulnerability to escalate privileges...

SUSE CVE-2021-0003

Improper conditions check in some IntelR Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure via local access...

Use After Free

linux-gcp, linux-aws, linux-oracle, linux-kvm and linux-dell300x are vulnerable to free after use. The vulnerability exists in the tsttimer function in drivers/atm/idt77252.c because of incorrect use of dynamic memory during program operation...