Security update for the Linux Kernel

The SUSE Linux Enterprise FIXME kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...

SUSE-SU-2025:4111-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990831 advisory. In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enicsetvfport enicsetvfport assumes that the nl attribu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989855 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989047 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriovnumvfs to zero It is possible to disable VF...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: - ice: Fixed the memory leak in the eswitch code during the reset scenario. - Added a simple check for the eswitch mode in the procedure for attaching VFs. Memory structures for the required port representer were only allocate...

Linux Distros Unpatched Vulnerability : CVE-2025-40023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38659)

enic: Validate length of nl attributes in enicsetvfport enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length PORTUUIDMAX. These attributes are validated in the function dosetlink in...

Siemens SIMATIC Devices Race Condition (CVE-2024-36020)

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the...

Linux Distros Unpatched Vulnerability : CVE-2025-39969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to...

EUVD-2022-54513

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled, when it requests a reset. If PF driver assumes that VF is disabled, while VF still has queues configured, VF may...

CVE-2025-40023

CVE-2025-40023 concerns a Linux kernel issue in the drm/xe/vf path where sysfs attributes that are not applicable to Virtual Functions (VFs) are exposed. The description notes that VFs cannot read the BMG_PCIE_CAP(0x138340) register nor access PCODE (guarded by info.skip_pcode), and attempting to...

EUVD-2022-54607

In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efxef10tryupdatenicstatsvf. When releasing a DMA coherent buffer, sometimes, I don't know in what specific circumstances, it has t...

SUSE CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CLSA-2025-1760546935 kernel: Fix of 43 CVEs

locking/wwmutex/test: Fix potential workqueue corruption CVE-2023-52836 - netfilter: ipset: Fix suspicious rcudereferenceprotected CVE-2024-40993 - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type CVE-2024-39503 - netfilter: ipset: Missing gc cancellations fixed...

EUVD-2025-34600

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40evalidatequeuemap Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evalidatequeuemap...

CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CVE-2025-39969

CVE-2025-39969 (Linux kernel, i40e driver) : The VF state-based authorization was overly coarse, treating VF_STATE_ACTIVE as the sole indicator for whether a VF could obtain resources. The fix replaces this with the more precise I40E_VF_STATE_RESOURCES_LOADED (set in i40e_vc_get_vf_resources_msg(...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936102 advisory. A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vffloodfill.c, which might lead to memory corruption and other potential consequences...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-427357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-427357 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF...