CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

RHSA-2025:21068 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update

Bulletin has no description...

CVE-2025-40167 ext4: detect invalid INLINE_DATA + EXTENTS flag combination

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

CVE-2025-40124

CVE-2025-40124 concerns a Linux kernel vulnerability affecting SPARC/UltraSPARC III platforms where copy_from_user() could return an impossibly large value, triggering a BUG_ON in ext4 when large folios are enabled. The root cause is the exception handling in copy_from_user/copy_to_user returns i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990869 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb-sk in ipvlanprocessv4,6outbound Raw packet from PFPACKET socket ontop of an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990771 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUGON when directory entry has invalid reclen The reclen field in the directory entry h...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990863)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990863 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUGONrefs == 0, which...

RHEL 9 : kernel (RHSA-2025:21051)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21051 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: Fix semi-unbounded...

kernel: blk-cgroup: Fix UAF in blkcg_unpin_online()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf has a BUGON that can trigger with the following: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20023-1 Rating: important References: bsc1252881 Cross-References: CVE-2025-12428 CVE-2025-12429 CVE-2025-12430 CVE-2025-12431 CVE-2025-12432...

ALBA-2025:20841 Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

Security update for MozillaThunderbird (important)

openSUSE security update: security update for mozillathunderbird ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20006-1 Rating: important References: bsc1249391 Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532...

netfs: Fix missing xas_retry() calls in xarray iteration

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990596 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support...

SUSE-SU-2025:20982-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

This update for kernel-livepatch-MICRO-6-0-RTUpdate4 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1246019 - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 - CVE-2025-38618: vsock: Do not allow binding to...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.43 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.2 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989871 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing free nid in f2fshandlefailedinode This patch fixes xfstests/generic/475 failure...