Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002706 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003018 advisory. In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002124 advisory. The 1 BPFSANCNLATTR and 2 BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not chec...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002105 advisory. The BPFSANCNLATTRNEST extension implementation in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002619 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002823 advisory. The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002830 advisory. The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service use-after-free or possibly have...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003008 advisory. The adjustbranches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003081 advisory. The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local use...

CVE-2025-71129 LoongArch: BPF: Sign extend kfunc call arguments

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new...

CVE-2025-71129 LoongArch: BPF: Sign extend kfunc call arguments

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000882 advisory. The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local use...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Accounting for the currently allocated stack depth in widenimprecisescalars The usage pattern of widenimprecisescalars is as follows: python prevst = findpreventryenv, ...; queuedst = pushstack...; widenimprecisescalarsenv,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an out-of-bounds dynptr write in bpfcryptocrypt. Stanislav reported that in bpfcryptocrypt, the size of the destination dynptr is not validated to be at least as large as the size of the source dynptr before calling th...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In the bpf module, it was necessary to check whether the helper function is valid in gethelperproto. The kernel test robot reported a bug related to the verifier 1, where the helper function pointer could be NULL due to a disable...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: BPF: Rejects negative offsets for ALU operations When verifying BPF programs, the checkaluop function validates instructions that involve ALU operations. The “offset” field in these instructions is a signed 16-bit integer. The...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Ensure that memcg is instructed to use allowspinning=false in bpftimerinit. Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as an...

ROS-20260113-7328

A vulnerability in the checkfuncarg function of the kernel/bpf/verifier.c module of the Linux kernel is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260113-7364

A vulnerability in the checkhelpermemaccess function of the kernel/bpf/verifier.c module of the Linux operating system kernel is related to bugs in the code . Exploitation of the vulnerability could allow an attacker to affect the integrity and availability of protected information...

K000159060: Linux kernel vulnerability CVE-2024-56615

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the...