Unity Linux 20.1070a Security Update: kernel (UTSA-2025-405540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-405540 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is enabled...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987094 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414426 advisory. The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state. Tenable has extracted the precedi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-423016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423016 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tlsinit In tlsinit, a write memory barrier is missing, and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414683 advisory. A vulnerability was found in Linux Kernel where refcount leak in llcpsockbind causing use-after-free which might lead to privilege escalations. Tenable has extracted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414393 advisory. A flaw was found in the Linux kernels networking code. A use-after-free was found in the way the schsfb enqueue function used the socket buffer SKB cb field after th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987165)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987165 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986554 advisory. In the Linux kernel, the following vulnerability has been resolved: hvsock: Initializing vsk-trans to NULL to prevent a dangling pointer When hvs is released, there ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987284 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986897)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986897 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9socketopen Both p9fdcreatetcp and p9fdcreateunix will ca...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-436290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-436290 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394251 advisory. In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986885 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst and its...

JACK2 Audio Server Confidential Data Access

The vulnerability of the posix/JackSocket.cpp component of the JACK2 audio server is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

SUSE CVE-2023-53585

In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk = somelookupfunc bpfskassignskb, sk bpfskreleasesk That is, the sk is not consumed by bpfskassign. The function therefore needs to make...

SUSE CVE-2023-53590

In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctpstreampriorities to avoid a nested loop With this refcnt added in sctpstreampriorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio ...

SUSE CVE-2023-53601

In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...

CVE-2023-53585

In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk = somelookupfunc bpfskassignskb, sk bpfskreleasesk That is, the sk is not consumed by bpfskassign. The function therefore needs to make...

CVE-2023-53559

In the Linux kernel, the following vulnerability has been resolved: ipvti: fix potential slab-use-after-free in decodesession6 When ipvti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ipvti devic...

UBUNTU-CVE-2023-53585

In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk = somelookupfunc bpfskassignskb, sk bpfskreleasesk That is, the sk is not consumed by bpfskassign. The function therefore needs to make...