Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988947 advisory. In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special ...

kernel: aio: fix use-after-free due to missing POLLFREE handling

A flaw was found in the Linux kernel AIO poll path. It does not handle POLLFREE, so a file can be released while AIO still uses it. A local user can trigger a use-after-free and crash the kernel...

SUSE CVE-2021-47505

In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special in that they use a waitqueue whose lifetime is the current task, rather than the struct file as is normally the case. This is okay f...

SUSE CVE-2022-3176

There exists a use-after-free in iouring in the Linux kernel. Signalfdpoll and binderpoll use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the iouring poll doesn't handle POLLFREE. This allows a...

Linux Heap Buffer Overflow DoS

The vulnerability of the Signalfdpoll and binderpoll functions in Linux operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DEBIAN-CVE-2022-3176

There exists a use-after-free in iouring in the Linux kernel. Signalfdpoll and binderpoll use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the iouring poll doesn't handle POLLFREE. This allows a...