Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989000 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989131 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: handle channel mappping list correctly Currently each channel is added as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990289 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implemen...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989595 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990168 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192e: Fix deadlock in rtllibbeaconsstop There is a deadlock in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990194)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990194 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988672 advisory. In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalancechildren Move dmtmunlock after dmtmdec. Tenable h...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau/nvif: Fixed a potential memory leak in nvifvmmctor. When the nvifvmmtype is invalid, an error will be returned directly, without freeing the arguments passed to nvifvmmctor. This could lead to a memory leak. This...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: The issue of destroying KFD debugfs after destroying KFD wq has been addressed. Since the KFD proc content was moved to the kernel debugfs, we cannot destroy KFD debugfs before calling kfdprocessDestroywq. Moving...

SUSE SLES15 Security Update : kernel RT (Live Patch 7 for SLE 15 SP6) (SUSE-SU-2025:3880-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3880-1 advisory. This update for the Linux Kernel 6.4.0-1506001023 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a...

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP7) (SUSE-SU-2025:3886-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3886-1 advisory. This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a nul...

AZL-69415 CVE-2025-40100 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...

CVE-2025-40099

CVE-2025-40099 affects the Linux kernel CIFS/SMB client, specifically parse_dfs_referrals in fs/smb/client/misc.c. A malicious SMB server can send malformed FSCTL_DFS_GET_REFERRALS replies (smaller than the reply struct or with NumberOfReferrals larger than the header indicates), leading to out-o...

EUVD-2025-36442

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below: ------------ cut here ------------ kernel BUG at fs/f2fs/file.c:1243! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5354...

DEBIAN-CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess-rpchandlelist' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess-rpclock' an rwsemaphore. However, the lockin...

CVE-2025-40078 bpf: Explicitly check accesses to bpf_sock_addr

In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpfsockaddr Syzkaller found a kernel warning on the following sockaddr program: 0: r0 = 0 1: r2 = u32 r1 +60 2: exit which triggers: verifier bug: error during ctx access conversion 0 This is...

CVE-2025-40078

Linux kernel vulnerability CVE-2025-40078 concerns bpf_sock_addr padding access. Syzkaller-triggered a verifier bug during context access conversion because an implicit 4-byte padding after msg_src_ip4 was not rejected, allowing invalid padding access to slip through sock_addr_is_valid_access. Th...

EUVD-2025-36458

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40057

CVE-2025-40057 concerns the Linux kernel. The issue, tracked as ptp: Add a upper bound on max_vclocks, arises when the max_vclocks_store argument becomes too large for kcalloc, potentially triggering allocation failures. The vulnerability is resolved by extending guards to prevent oversized value...