Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987227 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2025-986088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986088 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init default configurations...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986858 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2hcdinit usbcreatehcd will alloc memory for hcd, and we should...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987126 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-420441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-420441 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987226 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when btinit fails btinit calls btledsinit to register led, but if ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987035 advisory. In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in imainitcrypto On failure to allocate the SHA1 tfm, IMA fails to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986507 advisory. In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Fix two use after free in ibmasminitone In ibmasminitone, it calls...

PT-2025-41110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to error handling during MBHC Memory Block Handling Controller initialization within the wcd938x codec. Specifically, the initialization proce...

SUSE CVE-2023-53558

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid prinfo with spin lock in cblistinitgeneric prinfo is called with rtp-cbsgbllock spin lock locked. Because prinfo calls printk that might sleep, this will result in BUG like below: 0.206455 cblistinitgeneric:...

CVE-2025-10746

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

CVE-2023-53611

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...

CVE-2023-53558

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid prinfo with spin lock in cblistinitgeneric prinfo is called with rtp-cbsgbllock spin lock locked. Because prinfo calls printk that might sleep, this will result in BUG like below: 0.206455 cblistinitgeneric:...

UBUNTU-CVE-2022-50473

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobjectinitandadd In cpufreqpolicyalloc, it will call uninitialed completion in cpufreqsysfsrelease when kobjectinitandadd fails. And that will cause a crash such as the following page fault in...

UBUNTU-CVE-2023-53561

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

UBUNTU-CVE-2023-53558

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid prinfo with spin lock in cblistinitgeneric prinfo is called with rtp-cbsgbllock spin lock locked. Because prinfo calls printk that might sleep, this will result in BUG like below: 0.206455 cblistinitgeneric:...

CVE-2023-53604 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

CVE-2023-53594 driver core: fix resource leak in device_add()

In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...

CVE-2023-53558

CVE-2023-53558 affects the Linux kernel. Details from the initial document show a bug in rcu-tasks: pr_info() was called while holding rtp->cbs_gbl_lock, which could sleep and trigger a BUG; the vulnerability is resolved by moving pr_info() so it runs without the lock. The patch is described a...

CVE-2023-53558 rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid prinfo with spin lock in cblistinitgeneric prinfo is called with rtp-cbsgbllock spin lock locked. Because prinfo calls printk that might sleep, this will result in BUG like below: 0.206455 cblistinitgeneric:...