Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990413)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990413 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound UBSAN with byte size cells If a cell has 'nbits' equal to a multip...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990395)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990395 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5adddisks There's a KASAN warning in raid5adddisk when running...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990525 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in ext4writepages we got issue as follows: EXT4-fs error device loop0:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989825 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990035 advisory. In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether the client...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989704)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989704 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988791)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988791 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix read out-of-bounds in ubifswbufwritenolock Function ubifswbufwritenolock may access b...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990225 advisory. In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989599 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f2fsbugon when uninstalling filesystem call f2fsevictinode. creating a large files duri...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988662)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988662 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free Read in tipcnamedreinit syzbot found the following issue on:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988988 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi: bcm2835:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989311 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiqgswip: fix use after free in gswipremove ofnodeputpriv-ds-slavemiibus-dev.ofnode...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990251 advisory. In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUGON in control parser Fix a BUGON from 2009. Even if it looks unreachable I...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988881 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: raydiumtsi2c - fix memory leak in raydiumi2csend There is a kmemleak when test the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989928 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ceph: avoided a kernel bug for encrypted inodes with unaligned file sizes The generic/397 test encountered a bug in the case of encrypted inodes with unaligned file sizes for example, 33K or 1K: 877.737811 ran fstests generic/397...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: Add a target node validity check in damonmigratepages. This validation is taken from dopagesmove, which is used in the movepages system call. The bug occurs when damonmigratepages attempts to migrate pages ev...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: perform proper folio cleanup when cowfilerange fails BUG When testing with COW fixup marked as BUGON this involves the new pinuserpages change, which should not result in new out-of-band dirty pages, I encountered a crash...

SUSE CVE-2025-40059

In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value of devmkzalloc The return value of devmkzalloc could be an null pointer, use "!desc.pdata" to fix incorrect handling return value of devmkzalloc...

CVE-2025-40055

CVE-2025-40055 affects the Linux kernel OCFS2, describing a double-free in the path handling user_cluster_connect(). The root cause is that user_cluster_disconnect() frees the same memory as conn->cc_private (the lc object) and the error handling frees lc again, leading to a double-free. The d...