Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986317 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-416543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416543 advisory. In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987028 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: fix missing INITLISTHEAD in ieee802154ifadd Kernel fault injection test reports...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986946 advisory. In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again aft...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986952 advisory. In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the realdev refcnt Inject error before devholdrealdev in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414471 advisory. In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414480 advisory. A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986977)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986977 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391635 advisory. In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The following memory leak was reported after...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381332 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6probe syzbot caught a NULL dereference in rt6probe ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986428 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2023-53568

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...

CVE-2023-53568

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...

CVE-2023-53613

CVE-2023-53613 : Local, kernel-level use-after-free in the dax subsystem of the Linux kernel (dax_mapping_release) during removal of a device-dax region. The issue arises from freeing ida objects and releasing a parent object, risking use-after-free on dax_mapping_release timing. A fix is provide...

CVE-2023-53613 dax: Fix dax_mapping_release() use after free

In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-dax region provider like modprobe -r daxhmem yields: kobject: 'mapping0' ffff93eb460e8800: kobjectrelease, parent 0000000000000000...

CVE-2023-53571

The CVE-2023-53571 entry concerns the Linux kernel DRM/I915: the fix changes intel_get_crtc_new_encoder() to fetch the dev pointer from the atomic state instead of relying on a potentially NULL encoder, avoiding a WARN that could lead to an oops when a connector for the CRTC isn’t found in the at...

CVE-2023-53571 drm/i915: Make intel_get_crtc_new_encoder() less oopsy

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intelgetcrtcnewencoder less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get th...

CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...