Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001378 advisory. In the Linux kernel before 5.12.4, net/bluetooth/hcievent.c has a use-after-free when destroying an hcichan, aka CID-5c4c8c954409. This leads to writing an arbitrary...

InstantBits Web Video Cast App 安全漏洞

InstantBits Web Video Cast App is a cross-platform casting app from US-based InstantBits. A security vulnerability exists in InstantBits Web Video Cast App version 5.12.4 and earlier, which stems from improper export of the AndroidManifest.xml file component com.instantbits.cast.webvideo...

SUSE CVE-2021-45486

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small...

UVI-2021-1000295 regmap: set debugfs_name to NULL after it is freed

regmap: set debugfsname to NULL after it is freed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000291 Drivers: hv: vmbus: Drop error message when 'No request id available'

Drivers: hv: vmbus: Drop error message when 'No request id available' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000283 spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()

spi: fsl-lpspi: Fix PM reference leak in lpspipreparexferhardware This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000260 iommu/vt-d: Remove WO permissions on second-level paging entries

iommu/vt-d: Remove WO permissions on second-level paging entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000257 powerpc/64s: Fix pte update for kernel memory on radix

powerpc/64s: Fix pte update for kernel memory on radix This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000239 iommu/mediatek: Always enable the clk on resume

iommu/mediatek: Always enable the clk on resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000272 media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

media: venus: core: Fix some resource leaks in the error path of 'venusprobe' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000291 Drivers: hv: vmbus: Drop error message when 'No request id available'

Drivers: hv: vmbus: Drop error message when 'No request id available' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000249 RDMA/qedr: Fix error return code in qedr_iw_connect()

RDMA/qedr: Fix error return code in qedriwconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000301 drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode.

drm/amdgpu: Init GFX10ADDRCONFIG for VCN v3 in DPG mode. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000276 scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()

scsi: lpfc: Fix null pointer dereference in lpfcprepelsiocb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000237 mt76: mt7915: fix memleak when mt7915_unregister_device()

mt76: mt7915: fix memleak when mt7915unregisterdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000295 regmap: set debugfs_name to NULL after it is freed

regmap: set debugfsname to NULL after it is freed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000299 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

KVM: Destroy I/O bus devices on unregister failure after sync'ing SRCU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000233 powerpc/64: Fix the definition of the fixmap area

powerpc/64: Fix the definition of the fixmap area This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...