Linux Distros Unpatched Vulnerability : CVE-2025-68202

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix unsafe locking in the scxdumpstate For built with CONFIGPREEMPTRT=y kernels, the dumplock will be converted sleepable spinlock and not disable-ir...

CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

CVE-2023-53756

Summary of CVE-2023-53756 (CVE-2023-53756) : The issue is in KVM with Intel VMX where MSR bitmap updates could use a per-CPU current_vmcs that may be uninitialized, allowing a NULL-dereference and potential crash on nested Hyper-V configurations. The root cause is the check for current_vmcs in ev...

CVE-2023-53756 KVM: VMX: Fix crash due to uninitialized current_vmcs

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

PT-2025-49486

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized current vmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcs touch msr bitmap function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990801 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcpmakesynack can be called from process context tcprtxsynack now could be called in process...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990601 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989554 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add condresched for no forced preemption model For no forced preemption model...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988839 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990364 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add condresched for no forced preemption model For no forced preemption model...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989491 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: do not decrement idle task preempt count in CPU offline With PREEMPTCOUNT=y, when a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989641 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989921 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989969 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990225 advisory. In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: State: Initialize stateptrs earlier in xfrmstatefind In cases of preemption, xfrmstatelookat will find a different pcpuid and look up states for that other CPU. If a state is matched for CPU2 in the statecache while the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys – fix a sleep while atomic with PREEMPTRT. When PREEMPTRT is enabled, the gpiokeysirqtimer callback runs in the hardirq context. However, the inputevent function takes a spinlock, which is not allowed in that...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discarding stale CPU state when handling SME traps The logic for handling SME traps improperly manipulates the saved FPSIMD/SVE/SME state. A race condition can occur when the SME trap handler is preempted before and...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netsched: genestimator: fix esttimer vs CONFIGPREEMPTRT=y The syzbot reported a warning in esttimer 1. The problem arises from the fact that when CONFIGPREEMPTRT=y is enabled, timer callbacks can be preempted...