Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993097 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992900 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use f2fsbugon in f2fsnewnodepage As Dipanjan Das reported, syzkaller found a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993103 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993286)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993286 advisory. In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's skwq in skstreamwaitmemory Fixes the below NULL pointer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993260 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmetreqcomplete An nvme target -queueresponse operation...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993282 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile-parent-dentsAAFSPROFDIR could be NULL onl...

EUVD-2023-60490

In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005i2cxfer In af9005i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach af9005i2cxfer. If...

EUVD-2023-60520

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The buf4 value comes from the user via tsplay. It is a value in the u8 range. The final length we pass to av7110ipackinstantrepack is "len - buf4 + 1 - 4" so add a check to...

CVE-2022-50884

In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drmcopyfield to attempt copying a NULL pointer There are some struct drmdriver fields that are required by drivers since drmcopyfield attempts to copy them to user-space via DRMIOCTLVERSION. But it can be possible th...

CVE-2023-54245

CVE-2023-54245 concerns a Linux kernel vulnerability in ASoC: codecs: tx-macro where a KASAN slab-out-of-bounds read occurred (regcache_flat_read path). The issue manifested under syzkaller as a read from regcache_flat_read traced through regmap_READ/UPDATE_BITS and snd_soc_component_write_field,...

CVE-2022-50855 bpf: prevent leak of lsm program after failed attach

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...

CVE-2022-50816 ipv6: ensure sane device mtu in tunnels

In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report 1 with no reproducer hints at a bug in ip6gre tunnel dev:ip6gretap0 Since ipv6 mcast code makes sure to read dev-mtu once and applies a sanity check on it see commit...

CVE-2022-50812 security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIGZEROCALLUSEDREGS to gcc or clang 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences see the links above the check for more information. Restrict...

OESA-2025-2882 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:tcpmetrics: validate source addr lengthI don t see anything checking that TCPMETRICSATTRSADDRIPV4is at least 4 bytes long, and the policy doesn t have an entryfor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992499 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992293 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992470 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid With clang's kernel control flow...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992372 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore it...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992240 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: make sure skb-len != 0 when redirecting to a tunneling device syzkaller managed to trigger...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992526 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmapzalloc must be balanced by a correspondi...