Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414630 advisory. Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986811 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential memory leak in DMUB hwinit Why On resume we perform DMUB hwinit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987106 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit:...

Linux Distros Unpatched Vulnerability : CVE-2025-39901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: remove read access to debugfs files The 'command' and 'netdevops' debugfs files are a legacy debugging interface supported by the i40e driver since its...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391380 advisory. In the Linux kernel, the following vulnerability has been resolved: dccp: Fix memory leak in dccpfeatchangerecv If dccpfeatpushconfirm fails after new value for SP...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986322 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe kerne...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414462 advisory. KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987140 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987208 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compatinsnlist compatinsnlist handles the 32-bit version of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414622 advisory. An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986944 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986427 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism for...

UBUNTU-CVE-2022-50480

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353smcprobe The break of foreachavailablechildofnode needs a corresponding ofnodeput when the reference 'child' is not used anymore. Here we do not need to call ofnodeput in fail path...

CVE-2023-53614

Summary: CVE-2023-53614 affects the Linux kernel in the mm/ksm path, where exit_mmap() may teardown VMAs and the maple tree while mmap_lock is held, risking a destroyed maple tree being dereferenced. The fix ensures maple tree validity by checking ksm_test_exit() after obtaining mmap_lock in read...

CVE-2023-53611 ipmi_si: fix a memleak in try_smi_init()

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...

CVE-2023-53604 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

CVE-2022-50480 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353smcprobe The break of foreachavailablechildofnode needs a corresponding ofnodeput when the reference 'child' is not used anymore. Here we do not need to call ofnodeput in fail path...

CVE-2022-50480 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353smcprobe The break of foreachavailablechildofnode needs a corresponding ofnodeput when the reference 'child' is not used anymore. Here we do not need to call ofnodeput in fail path...

CVE-2025-39929 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...

CVE-2022-50490: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if htablockbucket returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but...