CVE-2023-53624: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: fix integer overflow of "credit" if schfq is configured with "initial quantum" having values greater than INTMAX, the first assignment of "credit" does signed integer overflow to a very negative value. In this...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-425481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-425481 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible fo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987125 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414312 advisory. A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality wa...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-411356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411356 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Fix memory leak in acpiprocessorpowerexit After unregistering the CPU idle...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a schfq integer overflow that could lead to a soft CPU lockup...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987102 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix stack-out-of-bounds memory access from ioapicwriteindirect KASAN reports the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986583 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed during 5.1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386566 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in fib6droppcpufrom syzbot found a race in fib6droppcpufrom 1 If compiler...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-406366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-406366 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in getfreeelt tracingmap-nextelt in getfreeelt is at risk of overflowing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-395316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-395316 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986455 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed during 5.1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986650 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986997 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...

Security Bulletin:IBM SDK, Java Technology Edition Quarterly CPU - Jul 2025 - Includes Oracle July 2025 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 and Java 17 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM SDK, Java Technology Editio...

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM Semeru Runtime used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. These issues were disclosed as part of the IBM Semeru Runtime Quarterly CPU - Jul 2025 - Includes OpenJDK July 2025 CPU...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM® SDK Java™ used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in the Oracle July 2025 CPU...

RockyLinux 8 : kernel (RLSA-2025:15471)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15471 advisory. kernel: bpf: Don't use tnumrange on array range checking for poke descriptors CVE-2022-49985 kernel: posix-cpu-timers: fix race between...

SUSE CVE-2022-50493

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xxprocessresponsequeue+0x42a/0x970 qla2xxx qla2x00startnvmemq+0x3a2/0x4b0 qla2xxx...

SUSE CVE-2023-53544

In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and only then calls cpufrequnregisterdriver. If one of the cpufreq callbacks is called just before cpufrequnregisterdriver is run, the freed clks...