Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989809 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface There may be a bad USB aud...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989392 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989916 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988728 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988765 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Add missing ofnodeput in wcd934xcodecparsedata The devicenode pointer is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990018 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in codec's...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990029 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can no...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989317 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988926 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

CLSA-2025-1762244848 kernel: Fix of 5 CVEs

ext4: fix possible UAF when remounting r/o a mmp-protected file system CVE-2021-47342 - ext4: fix memory leak in ext4fillsuper - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - ALSA: usb-audio: Fix an...

CVE-2025-47352

Memory corruption while processing audio streaming operations...

CVE-2025-47352 Improper Validation of Array Index in Audio

Memory corruption while processing audio streaming operations...

CVE-2025-47352

CVE-2025-47352 is described as a memory corruption in Qualcomm chipsets during audio streaming processing, caused by improper validation of an array index in the audio path. The vulnerability is characterized in multiple feeds with the same description; one source (PT-2025-44924) explicitly ties ...

CVE-2025-47352 Improper Validation of Array Index in Audio

Memory corruption while processing audio streaming operations...

CVE-2025-47352: Improper Validation of Array Index

Memory corruption while processing audio streaming operations...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing audio streaming operations...

PT-2025-44924

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when processing audio streaming operations. The issue is due to improper validation of array index in audio processing. Recommendations At the moment, there is no information...

kernel: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow although it's...

CLSA-2025-1762171389 kernel: Fix of 15 CVEs

nfs: fix possible null-ptr-deref when parsing param CVE-2022-50455 - KVM: arm64: Disassociate vcpus from redistributor region on teardown CVE-2024-40989 - HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 - ALSA: usb-audio: Validate UAC3 cluster segment descriptors...