Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988949 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len +...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986334 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len +...

SUSE CVE-2022-49727

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max...

UBUNTU-CVE-2022-49727

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max...

CVE-2022-49727

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max...

PT-2024-7311

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the l2tp component of the Linux kernel, specifically with the l2tp ip6 sendmsg function in net/l2tp/l2tp ip6.c. The problem arises from an incorrect calculation...

SUSE CVE-2013-3230

The l2tpip6recvmsg function in net/l2tp/l2tpip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2022-32918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-33162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-33209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. This problem has been identified but its actual impact and potential for attack have not been confirmed...

PT-2022-32768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-32576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-33026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

Linux Kernel Information Disclosure

A vulnerability exists in the l2tpip6getname function in the Linux kernel’s net/l2tp/l2tpip6.c file, due to incorrect return values under certain circumstances. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory, using a specially...

PT-2013-4239

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the l2tp ip6 recvmsg function in net/l2tp/l2tp ip6.c not initializing a certain structure...

PT-2013-1016

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists in the l2tp ip6 getname function in the Linux kernel due to incorrect return values under certain circumstances. This allows local users to access sensitive information from kerne...