ALSA-2025:19932 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: x86/vmscape: Add conditional IBPB mitigation CVE-2025-40300 kernel: mm: fix zswap writeback race condition CVE-2023-53178 kernel:...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: x86/vmscape: Add conditional IBPB mitigation CVE-2025-40300 kernel: mm: fix zswap writeback race condition CVE-2023-53178 kernel: fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-50367 For...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990614 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use ttyportdestroy to destroy port In goldfishttyprobe, the port initialized throu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990308 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988998 advisory. In the Linux kernel, the following vulnerability has been resolved: schcake: do not call cakedestroy from cakeinit qdiscs are not supposed to call their own destroy...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988846 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid racing on fsyncentryslab by multi filesystem instances As syzbot reported, the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989105 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: properly cancel timer from tapriodestroy There is a comment in qdisccreate...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988994 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989564 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use ttyportdestroy to destroy port In goldfishttyprobe, the port initialized throu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990200 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server-smbdconn in reconnect In smbddestroy, clear the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989476 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5coredestroycq error path Prior to this patch in case...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988689 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Don't null dereference ops-destroy A KVM device cleanup happens in either of two callbacks: ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990167 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of userdlmdestroylock When userdlmdestroylock failed, it didn't...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990041 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989463 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memory leak during stateful obj update stateful objects can be updated...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988882 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use ttyportdestroy to destroy port In goldfishttyprobe, the port initialized throu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989247 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989092 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of userdlmdestroylock When userdlmdestroylock failed, it didn't...

Oracle Linux 9 : kernel (ELSA-2025-19409)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19409 advisory. - crypto: xts - Handle EBUSY correctly CKI Backport Bot RHEL-119235 CVE-2023-53494 - fs: fix UAF/GPF bug in nilfsmdtdestroy CKI Backport Bot RHEL-1166...