Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987629 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we shou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987540 advisory. In the Linux kernel, the following vulnerability has been resolved: dpaa2-ptp: Fix refcount leak in dpaa2ptpprobe This node pointer is returned by offindcompatibleno...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987667 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiqgswip: Fix refcount leak in gswipgphyfwlist Every iteration of...

EUVD-2025-35075

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

AZL-78380 CVE-2025-40005 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

AZL-68597 CVE-2025-40005 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

UBUNTU-CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-40005 spi: cadence-quadspi: Implement refcount to handle unbind during busy

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-40005 spi: cadence-quadspi: Implement refcount to handle unbind during busy

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-40005

The CVE-2025-40005 entry concerns the Linux kernel’s cadence-quadspi driver. Technical detail from connected documents shows that the vulnerability arises when the indirect read/write path and force device removal (unbind) could crash the kernel during operation. The fix implements a refcount to ...

CVE-2025-40005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-39782: jbd2: prevent softlockup in jbd2logdocheckpoint bsc1249526. CVE-2025-39773: net: bridge: fix soft lockup in...

CVE-2025-39979

The CVE-2025-39979 issue affects the Linux kernel component mlx5 (net/mlx5: fs), where a use-after-free could occur during flow counter release due to uninitialized refcount and mutex on the HWS action when deleting a rule. The fix adds the missing initializations and introduces a refcount for th...

PT-2025-42254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the mlx5 network component, specifically related to the release of flow counter hardware structures HWS actions. This flaw occurs...

Linux Distros Unpatched Vulnerability : CVE-2023-53645

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpfrefcountacquire fallible for non-owning refs This patch fixes an incorrect...

Linux Distros Unpatched Vulnerability : CVE-2022-50539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4sraminit, offindcompatiblenode will return a node pointer with refcount incremented. We should use...

PT-2025-49386

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A reference count leak exists in the smb2 sess setup function within the SMB server component of the Linux kernel. Specifically, the reference count of ksmbd session can leak when a...

SUSE CVE-2022-50522

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in chameleonparsegdd, the refcount of bus and device name are leaked. Fix this by calling putdevice to give up the reference, so they can b...