CLSA-2025-1757961506 kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131763 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works as long as hugetlb is configured. However, dax doesn’t depend on hugetlb. Commit 414fd080d125 “mm/gup: fix guppmdrange for dax” fixed...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098856)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098856 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table...

K000161578: Linux kernel vulnerability CVE-2025-38085

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing trygrabfolio A kernel warning was reported when pinning folio in CMA memory during the launch of the SEV virtual machine. The error message looks like this: 464.325306 WARNING: CPU: 13 PID: 6734 at...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006648 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works a...

Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38085)

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38085)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38085 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fa...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004133 advisory. getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page...

OPENSUSE-SU-2025:20172-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989000 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes; this could potentially turn it into a normal page table used by another...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987274 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414389 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function followpagepte of the file mm/gup.c of...

EUVD-2024-53260

Malicious code in bioql PyPI...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

A flaw was found in the Linux kernel's hugetlb subsystem. This vulnerability allows a local attacker to cause information disclosure by exploiting a race condition between shared huge page table unsharing and concurrent fast page lookups. Under specific timing conditions, the kernel may traverse...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

A flaw was found in the Linux kernel's hugetlb subsystem. This vulnerability allows a local attacker to cause information disclosure by exploiting a race condition between shared huge page table unsharing and concurrent fast page lookups. Under specific timing conditions, the kernel may traverse...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

A flaw was found in the Linux kernel's hugetlb subsystem. This vulnerability allows a local attacker to cause information disclosure by exploiting a race condition between shared huge page table unsharing and concurrent fast page lookups. Under specific timing conditions, the kernel may traverse...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

A flaw was found in the Linux kernel's hugetlb subsystem. This vulnerability allows a local attacker to cause information disclosure by exploiting a race condition between shared huge page table unsharing and concurrent fast page lookups. Under specific timing conditions, the kernel may traverse...