CVE-2023-53627 scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Grab sasdev lock when traversing the members of sasdev.list When freeing slots in function slotcompletev3hw, it is possible that sasdev.list is being traversed elsewhere, and it may trigger a NULL pointer exception...

CVE-2023-53623

CVE-2023-53623 concerns the Linux kernel swap subsystem. The vulnerability arises from a race in swap_info[] handling where one thread deleting an si from the swap_info available list can be bypassed if si->lock isn’t held, allowing another thread to re-add the si and continue clearing flags s...

EUVD-2025-32821

In the Linux kernel, the following vulnerability has been resolved: tipc: fix an information leak in tipctopsrvkernsubscr Use a 8-byte write to initialize sub.usrhandle in tipctopsrvkernsubscr, otherwise four bytes remain uninitialized when issuing setsockopt..., SOLTIPC, .... This resulted in an...

CVE-2022-50531 tipc: fix an information leak in tipc_topsrv_kern_subscr

In the Linux kernel, the following vulnerability has been resolved: tipc: fix an information leak in tipctopsrvkernsubscr Use a 8-byte write to initialize sub.usrhandle in tipctopsrvkernsubscr, otherwise four bytes remain uninitialized when issuing setsockopt..., SOLTIPC, .... This resulted in an...

CVE-2022-50522 mcb: mcb-parse: fix error handing in chameleon_parse_gdd()

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in chameleonparsegdd, the refcount of bus and device name are leaked. Fix this by calling putdevice to give up the reference, so they can b...

SUSE CVE-2022-50494

In the Linux kernel, the following vulnerability has been resolved: thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash When CPU 0 is offline and intelpowerclamp is used to inject idle, it generates kernel BUG: BUG: using smpprocessorid in preemptible 00000000 code:...

SUSE CVE-2022-50504

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...

SUSE CVE-2022-50505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

EUVD-2020-8086

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986303 advisory. In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in Sy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986853 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986885 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst and its...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986806 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Fix memory leak when thresholdcreatebank fails In mcethresholdcreatedevice, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986916 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasdaliasgetstartdev due to missing pavgroup Fix Oops in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987002 advisory. In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memory leak from perfenvinsertbtf perfenvinsertbtf doesn't insert if a duplicate...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986577 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986431 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986660 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986473 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986379 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe kerne...