EulerOS 2.0 SP12 : cloud-init (EulerOS-SA-2025-2317)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990891 advisory. In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnvphp: Fix hotplug driver crash on Powernv The hotplug driver for powerpc...

kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

kernel: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 "hwpoison, memoryhotplug: allow hwpoisoned pages to be offlined add page poison checks in domigraterange in order to make offline hwpoisoned pa...

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1234863. CVE-2024-57891: schedext: Fix invalid irq restore in scxopsbypass...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989726 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989878 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989415 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989467 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected bit in th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990288 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mm/ptdump: The memory hotplug lock is now handled within ptdumpwalkpgd. Memory hot removal operations involve unmapping memory and destroying various kernel page table regions as needed. The ptdump code may race with concurren...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Added error handling for the old state CRTC in atomicdisable. Introduced error handling to address a issue where, after a hotplug event, the cursor continues to update. This situation can lead to a kernel panic d...

Siemens SIMATIC and SCALANCE Devices Use After Free (CVE-2024-57951)

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CPUHPONLINE to halfway through a CPU hotunplug down to CPUHPHRTIMERSPREPARE, and then back to CPUHPONLINE: Since hrtimerspreparecpu...

CPU hotplug DoS

The vulnerability of the CPU/hotplug components in the Linux operating system is related to improper error handling in the cpudownmapslocked function. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2022-54567

In the Linux kernel, the following vulnerability has been resolved: powerpc/memhotplug: Add addpages override for PPC With commit ffa0b64e3be5 "powerpc: Fix virtaddrvalid for 64-bit Book3E & 32-bit" the kernel now validate the addr against highmemory value. This results in the below BUGON with da...

PT-2025-51657

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc5-CI DRM 16515-gca0305cadc2d+ Description The Linux kernel contains a flaw in the drm/i915 subsystem related to lock inversion when pinning to GGTT on Cherry View CHV and Broxton BXT processors with...

ROS-20251023-01

A vulnerability in the cifscomposemountoptions function of the fs/smb/client/cifsproto.h module of the SMB client support kernel of the Linux operating system is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a...

EUVD-2023-59996

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in niwriteinode Syzbot reports a NULL dereference in niwriteinode. When creating a new inode, if allocation fails in miinit function called in miformatnew function, mi-mrec is set to NULL. In the...

EUVD-2022-55661

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

Linux Distros Unpatched Vulnerability : CVE-2022-50510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/smmuv3: Fix hotplug callback leak in armsmmupmuinit armsmmupmuinit won't remove the...