Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986376 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987359 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414674 advisory. Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414606 advisory. In the Linux kernel before 5.12.4, net/bluetooth/hcievent.c has a use-after-free when destroying an hcichan, aka CID-5c4c8c954409. This leads to writing an arbitrary...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986935 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987175 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986436 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986798 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hcisyncconncompleteevt This event is just specified for SCO and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414665 advisory. A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if scosockgetsockopt function in net/bluetooth/sco.c do not have a sanity check fo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987215 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414590 advisory. Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987284 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-401400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-401400 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hcireqsynccomplete In 'hcireqsynccomplete', always free the previou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414569 advisory. A use-after-free flaw was found in the Linux kernels Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986740 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414324 advisory. In the Linux kernel before 5.16.3, drivers/bluetooth/hciqca.c misinterprets the devmgpiodgetindexoptional return value expects it to be NULL in the error case, where...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414363 advisory. There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code executio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414396 advisory. A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2capreassemblesdu of the file...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986637)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986637 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity During our fuzz testing of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414673 advisory. Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used...