Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990583 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards o...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989578 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disable we fai...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989006 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpccall struct has a timer used to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989833 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards o...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990266 advisory. In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sessionnew: fix skb reference counting Since j1939sessionskbqueue does an extra...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989889 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: fix reference counting for struct tpmchip The following sequence of operations results in a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990243 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disable we fai...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990366 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards o...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989671 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: mma8452: Fix trigger reference couting The mma8452 driver directly assigns a trigger to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989782 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989870)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989870 advisory. In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sessionnew: fix skb reference counting Since j1939sessionskbqueue does an extra...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: LoongArch: Optimized module load time by optimizing PLT/GOT counting. When CONFIGKASAN, CONFIGPREEMPTVOLUNTARYBUILD, and CONFIGPREEMPTVOLUNTARY are enabled simultaneously, a soft deadlock may occur. The relevant logs are as...

CVE-2025-40096

Summary: CVE-2025-40096 in the Linux kernel relates to the drm_sched subsystem. The issue is a double free involving dma_fence_ref in drm_sched_job_add_resv_dependencies, triggered when adding dependencies via drm_sched_job_add_dependency() and on the error path. The double-free is described as h...

CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

drm/i915: Fix request ref counting during error capture & debugfs dump

...

kernel: tls: separate no-async decryption request handling from async

In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...

CVE-2025-40046

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by iozcrxrecvskb adjusting desc-count for all received buffers including frag lists, but then...

CVE-2025-40046

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by iozcrxrecvskb adjusting desc-count for all received buffers including frag lists, but then...

UBUNTU-CVE-2025-40046

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by iozcrxrecvskb adjusting desc-count for all received buffers including frag lists, but then...

CVE-2025-40064

The CVE-2025-40064 issue affects the Linux kernel’s SMC (smc) path during connect() where a use‑after‑free can occur when net_device is accessed after it is freed in __pnet_find_base_ndev(). The root cause is a race around fetching dst->dev and using it after the device’s lifetime, with RTNL h...