Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1234863. CVE-2024-57891: schedext: Fix invalid irq restore in scxopsbypass...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990426 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989195 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989694 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guestirq is coming from KVMIRQFD API call, it m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989914 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest In commit 10d91611f426 powerpc/64s:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988815 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990059 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990192 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Ubuntu: Security Advisory (USN-7854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, sriov-network-device-plugin-fips, custom-pod-autoscaler-fips, terraform-provider-azapi-fips, pushprox-fips, kuberlr, sbom-scorecard, trivy-operator, rancher, blob-csi-fips, cloud-provider-aws, node-problem-detector,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, sriov-network-device-plugin-fips, custom-pod-autoscaler-fips, terraform-provider-azapi-fips, pushprox-fips, kuberlr, sbom-scorecard, trivy-operator, rancher, blob-csi-fips, cloud-provider-aws, node-problem-detector,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, sriov-network-device-plugin-fips, custom-pod-autoscaler-fips, terraform-provider-azapi-fips, pushprox-fips, kuberlr, sbom-scorecard, trivy-operator, rancher, blob-csi-fips, cloud-provider-aws, node-problem-detector,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, sriov-network-device-plugin-fips, custom-pod-autoscaler-fips, terraform-provider-azapi-fips, pushprox-fips, kuberlr, sbom-scorecard, trivy-operator, rancher, blob-csi-fips, cloud-provider-aws, node-problem-detector,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: A stack overflow issue was fixed when loading vlenb. The user-space load mechanism can place up to 2048 bits into the xlen bit stack buffer. Since we only need the xlen bits, we check the size of the buffer in advanc...

SUSE CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

UBUNTU-CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-40102 KVM: arm64: Prevent access to vCPU events before init

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

Linux Distros Unpatched Vulnerability : CVE-2025-40102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that...