Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986544 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987147 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987385 advisory. In the Linux kernel, the following vulnerability has been resolved: netrom: Decrease sock refcount when sock timers expire Commit 63346650c1a9 netrom: switch to sock...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-424047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-424047 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251xopen The mcp251xhwwake function i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986394)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986394 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extenttree is not created This patch avoids the below panic. pc :...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986795 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986823 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close and udpabort Kaustubh reported and diagnosed a panic in udpliblookup...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987291 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to get stuck ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986412)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986412 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 net: usb: fix memor...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987084 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipcmsgvalidate As the call trace shows, the original skb was freed i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986860 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix refcount leak in a6xxgpuinit ofparsephandle returns a node pointer with refcoun...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-386953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386953 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series nilfs2: fix log writer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-430123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-430123 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls...

SUSE CVE-2025-39950

In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCPREPAIR A NULL pointer dereference can occur in tcpaofinishconnect during a connect system call on a socket with a TCP-AO key added and TCPREPAIR enabled. The...

SUSE CVE-2023-53547

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve the following general protection fault +0.108196 general protection fault, probably for non-canonical address 0xd5e5a4ae79d24a32: 0000 1...

SUSE CVE-2023-53580

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: core: Help prevent panic during UVC unconfigure Avichal Rakesh reported a kernel panic that occurred when the UVC gadget driver was removed from a gadget's configuration. The panic involves a somewhat complicated...

UBUNTU-CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

UBUNTU-CVE-2023-53596

In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devresreleaseall only gets called if the device has a bus and has been probed. This leads to issues when using bus-less or driver-less devices...

CVE-2023-53613 dax: Fix dax_mapping_release() use after free

In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-dax region provider like modprobe -r daxhmem yields: kobject: 'mapping0' ffff93eb460e8800: kobjectrelease, parent 0000000000000000...

CVE-2023-53562 drm/msm: fix vram leak on bind errors

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...