Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987111 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986348 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpolrebindpolicy mpolsetnodemaskmm/mempolicy.c does not set up...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-407686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407686 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407733 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987283 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987247 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object...

php:php-fuzz-execute: Use-of-uninitialized-value in find_implicit_binds_recursively

Detailed Report: https://oss-fuzz.com/testcase?key=5868110864515072 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: findimplicitbindsrecursively...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Use-of-uninitialized-value in ff_vvc_coding_tree_unit

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5600497089445888 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

libwebp:[email protected]: Use-of-uninitialized-value in HasAlpha32b_SSE2

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4753824549240832 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

The vulnerability of the insert_pin function in the OpenSC smart card library allows a violator to trigger a service failure.

The vulnerability of the insertpin function in the OpenSC smart card library is related to an unvalidated return value. Exploiting this vulnerability allows a remote attacker to cause service failures...

binutils:fuzz_dlltool: Use-of-uninitialized-value in bfd_getl64

Detailed Report: https://oss-fuzz.com/testcase?key=5773375697125376 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdlltool Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdgetl64 alphaecoffswapfilehdrin...

php:php-fuzz-execute: Use-of-uninitialized-value in find_implicit_binds_recursively

Detailed Report: https://oss-fuzz.com/testcase?key=4904950019981312 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: findimplicitbindsrecursively findimplicitbinds...

SUSE CVE-2022-50501

In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcodairamalloc As the codairamalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others...

SUSE CVE-2025-39931

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...

OSV-2025-809 Use-of-uninitialized-value in WebPCleanupTransparentArea

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...

PT-2025-46089

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...

CVE-2023-53569 ext2: Check block size validity during mount

In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superblock has sensible value. Otherwise the shift computing the block size can overflow leading to undefined behavior...

CVE-2023-53534 drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtkdrmcrtc: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

EUVD-2025-32387

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identified by Smatch checker. drivers/net/wireless/microchip/wilc1000/wlancfg.c:184 wilcwlanparseresponseframe error:...

CVE-2025-39931 crypto: af_alg - Set merge to zero early in af_alg_sendmsg

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...