Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990308 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990276 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988660 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a race on...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989512 advisory. In the Linux kernel, the following vulnerability has been resolved: locking/wwmutex/test: Fix potential workqueue corruption In some cases running with the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989654)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989654 advisory. In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpusreadlock/unlock ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990174 advisory. In the Linux kernel, the following vulnerability has been resolved: locking/wwmutex/test: Fix potential workqueue corruption In some cases running with the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: parisc: Remove WARNONONCE from flushcachevmap. I have observed warnings occasionally being triggered...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: bnxt: properly flushed XDP redirect lists We encountered the following crashes when testing the XDPREDIRECT feature in production: 56251.579676 listadd corruption. next-prev should be prev ffff93120dd40f30, but was...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hcicore, a use-after-free occurred in vhciFlush. syzbot reported a use-after-free in vhciFlush, without providing reproduction steps. 0 In the slab structure, a thread called close closed a vhci file descriptor...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: bcache: fixed a NULL pointer in cachesetFlush 1. LINE1794 – LINE1887 contains code related to the function of bchcachesetalloc. 2. LINE2078 – LINE2142 contains code related to the function of registercacheset. 3. The...

usb: gadget: core: flush gadget workqueue after device removal

...

SUSE CVE-2025-40027

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

UBUNTU-CVE-2025-40027

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

CVE-2025-40027

CVE-2025-40027 is a Linux kernel vulnerability in the 9p filesystem (net/9p) caused by a race between p9_fd_cancelled and p9_read_work that could lead to double deletion of a request (req_list) and memory corruption. The fix (commit 74d6a5d56629) updates the concurrency handling by skipping proce...

CVE-2025-40027 net/9p: fix double req put in p9_fd_cancelled

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-47696)

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs, the function flushworkqueue is invoked to flush the work queue iwcmwq. But ...

CVE-2025-40018

CVE-2025-40018 affects the Linux kernel IP Virtual Server (ipvs) code. On netns cleanup, __ip_vs_ftp_exit() may unregister ip_vs_ftp before flushing connections with valid cp->app pointers, causing a use-after-free. The fix introduces a global exiting_module flag, set during ip_vs_ftp_exit() b...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:3751-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3751-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...

SUSE-SU-2025:20870-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. - CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disable...