Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mishandling of the pmruntimeresumeandget error in the soundwire bus, which could lead to a usage count...

PT-2025-53973

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpf prog attach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPF LSM CGROUP, we return too earl...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992589 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992224 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: zynq: Fix refcount leak in zynqgetrevision offindcompatiblenode returns a node pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992658 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg When receiving propos...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992293 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992656 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is...

Linux Distros Unpatched Vulnerability : CVE-2023-54259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soundwire: bus: Fix unbalanced pmruntimeput causing usage count underflow This reverts commit 443a98e649b4 soundwire: bus: use pmruntimeresumeandget Change call...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992406 advisory. In the Linux kernel, the following vulnerability has been resolved: meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit offindmatchingnode returns a node point...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992380 advisory. In the Linux kernel, the following vulnerability has been resolved: bounds: Use the right number of bits for power-of-two CONFIGNRCPUS bitsper rounds up to the next...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992291 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcdedsibind Every iteration of foreachavailablechildofnode...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992375 advisory. In the Linux kernel, the following vulnerability has been resolved: skbuff: skbsegment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 skbuff...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992225 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3r5clusterofinit Every iteration of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992319 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix usecount leakage when handling boot-on I found a usecount leakage towards...

PT-2026-43827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count inconsistency occurs in the hfsplus module when the hfs bnode create function identifies that a node is already hashed. Instead of incrementing the reference count, the...

CVE-2025-68473 ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF Bluetooth host stack BlueDroid, the function btadmsdpresult used a fixed-size array uuidlist32MAXUUIDSIZE to store discovered service UUIDs during the...

PT-2026-43808

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locality leak occurs in the tpm i2c infineon component. When the get burstcount function returns -EBUSY due to a timeout, it exits immediately without releasing the locality previously...

Linux Distros Unpatched Vulnerability : CVE-2025-68350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent...

SUSE CVE-2022-50726

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix possible use-after-free in async command interface mlx5cmdcleanupasyncctx should return only after all its callback handlers were completed. Before this patch, the below race between mlx5cmdcleanupasyncctx and...

SUSE CVE-2022-50760

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix PCI device refcount leak in amdgpuatrmgetbios As comment of pcigetclass says, it returns a pcidevice with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we...