Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391136 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-380468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380468 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posixlockinode Light Hsieh reported a KASAN UAF warning...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987041 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-fr...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987337 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-398958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-398958 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: acquire rcureadlock in instancedestroyrcu syzbot reported that...

PT-2025-41021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Distributed Lock Manager DLM component. Specifically, an invalid dereference of sb lvbptr can occur when handling lock blocks on the stack,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986694)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986694 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix firmware activation deadlock scenarios Lockdep reports the following deadlock...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987368 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is...

PT-2025-41060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tipc topsrv accept function that can lead to a null pointer dereference. This issue was discovered by syzbot during testing. The root cause is tha...

PT-2025-41071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to SCSI operations with the hisi sas driver. Specifically, a NULL pointer dereference can occur when freeing slots, potentially triggered during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986610 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986374 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-414866)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414866 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity upda...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986748 advisory. In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpmpmsuspend with locks Currently tpm transactions are executed unconditionall...

SUSE CVE-2022-50490

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if htablockbucket returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but...

SUSE CVE-2022-50498

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnllock on resume Zbynek reports that alx trips an rtnl assertion on resume: RTNL: assertion failed at net/core/dev.c 2891 RIP: 0010:netifsetrealnumtxqueues+0x1ac/0x1c0 Call Trace: alxopen+0x230/0x570 alx...

SUSE CVE-2023-53558

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid prinfo with spin lock in cblistinitgeneric prinfo is called with rtp-cbsgbllock spin lock locked. Because prinfo calls printk that might sleep, this will result in BUG like below: 0.206455 cblistinitgeneric:...

SUSE CVE-2023-53590

In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctpstreampriorities to avoid a nested loop With this refcnt added in sctpstreampriorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio ...

SUSE CVE-2023-53593

In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, when cifsreadpageworker is called, the call contract is that the callee should unlock the page. This is documented in the readfolio section of...

SUSE CVE-2023-53614

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix race with VMA iteration and mmstruct teardown exitmmap will tear down the VMAs and maple tree with the mmaplock held in write mode. Ensure that the maple tree is still valid by checking ksmtestexit after taking the...