EUVD-2025-201574

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

CVE-2025-40281

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

UBUNTU-CVE-2025-40281

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

CVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

CVE-2025-40281

In the Linux kernel, CVE-2025-40281 affects SCTP in net/sctp/transport.c, where a shift-out-of-bounds could occur in sctp_transport_update_rto if rto_alpha_max/rto_beta_max were very large. The fix adds a run-time test to prevent regressions and includes READ_ONCE() annotations since sysctl value...

CVE-2025-40281

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

CVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990809 advisory. In the Linux kernel, the following vulnerability has been resolved: riscv: Use READONCENOCHECK in imprecise unwinding stack mode When CONFIGFRAMEPOINTER is unset, th...

PT-2025-49382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the sctp transport update rto function that may lead to a shift-out-of-bounds condition. This issue was identified by syzbot, which reported a potenti...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989386 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpearlyretrans. While reading sysctltcpearlyretrans, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989472 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopenblackholetimeout. While reading...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989616 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmaxreordering. While reading sysctltcpmaxreordering, it can b...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989076 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctlfibmultipathuseneigh. While reading sysctlfibmultipathuseneigh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988675 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpbasemss. While reading sysctltcpbasemss, it can be changed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989025 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpmtuprobefloor. While reading sysctltcpmtuprobefloor, it can ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989289 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthopcompatmode. While reading nexthopcompatmode, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989882 advisory. In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctlfwmarkreflect. While reading sysctlfwmarkreflect, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988797 advisory. In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdupdatepriority. While reading sysctlipfwdupdatepriority, it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988753 advisory. In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989184 advisory. In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in procdouintvec. A sysctl variable is accessed concurrently, and there is...