kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpurun loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpurun loop to fix a bug where KVM can load hardware with a stale...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:4006-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4006-1 advisory. This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. changed: Account Hub is now disabled by default for second email account bmo1992027 changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 bmo1952100 fixed: Users could not read mail...

RISC-V: KVM: Teardown riscv specific bits after kvm_exit

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990585 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990535 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2domountfs If jffs2buildfilesystem in jffs2domountfs returns an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990529 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990621 advisory. In the Linux kernel, the following vulnerability has been resolved: virtioconsole: eliminate anonymous moduleinit & moduleexit Eliminate anonymous moduleinit and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989274 advisory. In the Linux kernel, the following vulnerability has been resolved: virtioconsole: eliminate anonymous moduleinit & moduleexit Eliminate anonymous moduleinit and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989658 advisory. In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exitmmap A race is possible when a process exits...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988744 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGSSYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c3123...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989107)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989107 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix a race in rxrpcexitnet Current code can lead to the following race: CPU0 CPU1...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988871 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in iamoduleexit This module's remove path calls deltimer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990216 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989177 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in sndsocexit KASAN reports a use-after-free: BUG: KASAN:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990381 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989891 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: perf: Fixed the issue with sample generation and doexit operations. Baisheng Gao reported a crash in ARM64 mode. Mark interpreted this as a synchronous external abort—most likely due to attempting to access MMIO in a faulty wa...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RCU: Fixed a deadloop in rcureadunlock due to IRQ work. During rcureadunlockspecial, if this occurs during irqexit, we may get locked up if an IPI is issued. This is because the IPI itself triggers the irqexit path, causing a...

SUSE CVE-2025-40038

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VM-Exit handler if the next RIP isn't valid, e.g. because KVM is running with nrips=false. SVM must decode and emulate...