Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not acquiring the sasdev lock while traversing the sasdev.list member, which could result in a null pointer...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381332 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6probe syzbot caught a NULL dereference in rt6probe ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986982 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173max98090devprobe Call ofnodeputplatformnode to avoid...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391635 advisory. In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The following memory leak was reported after...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414471 advisory. In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414620 advisory. An issue was discovered in the Linux kernel before 5.11.7. usbipsockfdstore in drivers/usb/usbip/stubdev.c allows attackers to cause a denial of service GPF because...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986952 advisory. In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the realdev refcnt Inject error before devholdrealdev in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986946 advisory. In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again aft...

PT-2025-41071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to SCSI operations with the hisi sas driver. Specifically, a NULL pointer dereference can occur when freeing slots, potentially triggered during...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-408758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-408758 advisory. In the Linux kernel, the following vulnerability has been resolved: resource: fix regionintersects vs addmemorydrivermanaged On a system with CXL memory, the resourc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-416543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416543 advisory. In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function...

SUSE CVE-2023-53568

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...

CVE-2023-53568

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...

CVE-2023-53613

CVE-2023-53613 : Local, kernel-level use-after-free in the dax subsystem of the Linux kernel (dax_mapping_release) during removal of a device-dax region. The issue arises from freeing ida objects and releasing a parent object, risking use-after-free on dax_mapping_release timing. A fix is provide...

CVE-2023-53613 dax: Fix dax_mapping_release() use after free

In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-dax region provider like modprobe -r daxhmem yields: kobject: 'mapping0' ffff93eb460e8800: kobjectrelease, parent 0000000000000000...

CVE-2023-53571 drm/i915: Make intel_get_crtc_new_encoder() less oopsy

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intelgetcrtcnewencoder less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get th...

CVE-2023-53571

The CVE-2023-53571 entry concerns the Linux kernel DRM/I915: the fix changes intel_get_crtc_new_encoder() to fetch the dev pointer from the atomic state instead of relying on a potentially NULL encoder, avoiding a WARN that could lead to an oops when a connector for the CRTC isn’t found in the at...

CVE-2023-53568

Vulnerability (CVE-2023-53568) in the Linux kernel affects s390/zcrypt: when dev_set_name() fails, zcdn_create() leaks newly allocated resources instead of freeing them. The issue has been resolved by ensuring proper cleanup. The provided description notes the root cause and fix, and linked refer...

CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...

CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...