SUSE CVE-2025-71141

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drmkmshelperpollfini and drmatomichelpershutdown helpers should only be called when the device has been successfully registered. Currently, these functions are called...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003601 advisory. An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net...

MiracleLinux 7 : qemu-kvm-1.5.3-126.el7.3 (AXSA:2017-1267:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1267:01 advisory. qemu-kvm is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with the...

PT-2026-37604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak exists in the of get display timings function within the fbdev component. The of parse phandle function returns a device node with an incremented reference count, which i...

MiracleLinux 3 : gnome-vfs2-2.16.2-10.AXS3 (AXSA:2013-42:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-42:01 advisory. GNOME VFS is the GNOME virtual file system. It is the foundation of the Nautilus file manager. It provides a modular architecture and ships with several module...

MiracleLinux 7 : net-snmp-5.7.2-24.el7 (AXSA:2015-708:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-708:01 advisory. SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001542 advisory. The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too fa...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003941 advisory. Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information...

MiracleLinux 4 : 389-ds-base-1.2.11.15-14.AXS4 (AXSA:2013-412:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-412:03 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004262 advisory. Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003569 advisory. An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net...

CVE-2025-68791

A reference count leak flaw was found in the Linux kernel's FUSE filesystem when using iouring for argument copies. The copyfinish function is not called in error paths, causing page reference counts to leak. This can lead to memory being pinned indefinitely and potential resource exhaustion...

CVE-2025-68779

A use-after-free vulnerability was found in the Mellanox mlx5 Ethernet driver in the Linux kernel. The PSP Platform Security Processor component is unregistered twice during device removal - once in mlx5eremove and again in mlx5eniccleanup. This double unregistration causes a refcount underflow,...

SUSE CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

SUSE CVE-2025-68814

In the Linux kernel, the following vulnerability has been resolved: iouring: fix filename leak in ioopenatprep ioopenatprep allocates a struct filename using getname. However, for the condition of the file being installed in the fixed file table as well as having OCLOEXEC flag set, the function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002135 advisory. fs/overlayfs/copyup.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service dentry reference le...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003355 advisory. drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucmaleavemulticast to access a certain data structure after a cleanup step in...

CVE-2025-71141

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drmkmshelperpollfini and drmatomichelpershutdown helpers should only be called when the device has been successfully registered. Currently, these functions are called...

CVE-2025-71130

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb-vmai.vma pointers to NULL, simplifying...

UBUNTU-CVE-2025-71130

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb-vmai.vma pointers to NULL, simplifying...