Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407733 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue...

The vulnerability of the hsr_get_node() function in the net/hsr/hsr_framereg.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the hsrgetnode function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2024-26863

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue 1: ===================================================== BUG: KMSAN: uninit-value in hsrgetnode+0xa2e/0xa40 net/hsr/hsrframereg.c:2...

PT-2024-21540

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0 Description The issue arises when the packet type ID field in the Ethernet header is either ETH P PRP or ETH P HSR, but it is not followed by an HSR tag. In such cases, the function hsr get skb sequence nr...