CVE-2022-50835 jbd2: add miss release buffer head in fc_do_one_pass()

In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer head in fcdoonepass In fcdoonepass miss release buffer head after use which will lead to reference count leak...

CVE-2023-54202 drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915perfaddconfigioctl Userspace can guess the id value and try to race oaconfig object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking t...

CVE-2023-54190

In CVE-2023-54190, the Linux kernel fixes a refcount leak in leds-core: of_led_get() where class_find_device_by_of_node() previously took a reference via class_find_device() and relied on put_device() to drop it. The vulnerability pertains to the LED subsystem's reference counting and has been mi...

CVE-2023-54184 scsi: target: iscsit: Free cmds before session free

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are freed after session has been closed. That leads to use-after-free at command free or NPE with such call trace: Time2Retain timer expired for...

CVE-2023-54180

CVE-2023-54180 concerns the Linux kernel Btrfs repair flow when a dev-replace operation is in progress. The root cause is a BUG_ON() in btrfs_repair_io_failure() triggered while repairing a degraded/replace target device, due to mirror_num handling in btrfs_map_block() and possible manipulation o...

CVE-2023-54174 vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd

In the Linux kernel, the following vulnerability has been resolved: vfio: Fix NULL pointer dereference caused by uninitialized group-iommufd group-iommufd is not initialized for the iommufdctxput 20018.331541 BUG: kernel NULL pointer dereference, address: 0000000000000000 20018.377508 RIP:...

CVE-2022-50819

The CVE-2022-50819 vulnerability affects the Linux kernel’s udmabuf/dma-buf path. If the sg table creation fails, ubuf->sg must be set to NULL; otherwise, closing the dmabuf fd can trigger a use-after-free/null-deref in release_udmabuf, causing a crash. The issue was addressed by ensuring ubuf...

CVE-2022-50814 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sglsgenr KASAN reported this Bug: 17619.659757 BUG: KASAN: global-out-of-bounds in paramgetint+0x34/0x60 17619.673193 Read of size 4 at addr fffff01332d7ed00 by task readall/1507958...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing an unused skb, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from obtaining the source vCPU from the target VM, which could result in a null pointer dereference...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992486 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios...

PT-2025-53980

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-syzkaller-02734-g0326074ff465 Description The Linux kernel contained a flaw where a decl tag could be referenced in a func proto. This issue was discovered through Syzkaller testing and analysis by Martin...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992599 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992275 advisory. In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnpallocdev After commit 1fa5ae857bb1 driver core: get rid of struct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992635 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992515 advisory. In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite function Common realloc mistake: 'fileappend' nulled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992553 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992318 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insnemulation sysctls emulationprochandler changes...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992236 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid maxflowrings from dongle When firmware hit trap at...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992162 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisiinnophyprobe The size of array 'priv-ports' is...