Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989138 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs,unregistersubsystem When configfsregistersubsystem or...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990352 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988763 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: use trygetops in tpm-space.c As part of the series conversion to remove nested TPM operation...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990382)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990382 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix for a potential deadlock This fixes a 'possible circular locking dependen...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fixed a potential deadlock condition. The deadlock can occur due to a recursive lock acquisition of crostypecaltmodedata::mutex. The call chain is as follows: 1. crostypecaltmodework acquires the mutex. 2...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the race condition related to completed calls. When a call receives an event such as incoming data, the call is placed on the socket’s queue. A thread that is processing recvmsg can be awakened to process this event...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pinmux: The race condition that caused muxowner to become NULL with an active muxusecount has been fixed. The commit 5a3e85c3c397 “pinmux: Use sequential access to access desc-pinmux data“” attempted to address this issue by...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/hisilicon/hibmc: fixed the issue where hibmc loaded failed. When hibmc loaded failed, the driver used hibmcunload to free the resource, but the mutexes in mode.config were not initialized, which would access a NULL pointer...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: atm: The atmdevmutex is released after removing procfs in atmdevderegister. syzbot reported a warning during atmdevregister. 0 Before creating a new device and procfs/sysfs for it, atmdevregister looks up a duplicate device throu...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fixed a potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex. This is problematic because kzalloc can trigger fsreclaimaqcuir...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fixed an issue where an invalid lock was taken on a wedge. If devices like GuC upload are wedged, the submission is not yet enabled, and the state has not even been initialized. This fix prevents the wedge-related calls...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vhost-scsi: Protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbase when vq-logused is already set to false. vhost-thread QEMU-thread vhostscsicompletecmdwork - vhostaddused - vhostaddusedn If...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: atm: Added lecmutex. The issue was discovered in net/atm/lec.c, and it was found that there is an error path in lecdattach, which may lead to a dangling pointer in devlec. A mutex was added to protect the usage of devlec...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Do not decrement the ep refcount while still holding the ep mutex. Jann Horn points out that epoll decrements the ep refcount and then performs mutexunlock&ep-mtx. This is incorrect, as it can lead to a use-after-free...

kernel: Bluetooth: L2CAP: Fix user-after-free

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2capchanholdunlesszero after calling l2capgetchanblah to prevent the following trace: Bluetooth: l2capcore.c:static void l2capchandestroystruct kref kref Bluetooth: chan...

The vulnerability of components related to DRM/AMDKFD in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdkfd components of the Linux operating system’s kernel is related to incorrect blocking in the mutexunlock function. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35950)

drm/client: Fully protect modes with dev-modeconfig.mutex This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503496; scriptversion"1.2";...

EUVD-2022-54626

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qosmutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdmacmteardownconnections that uses the mutex. Thi...

PT-2025-49058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to a lock inversion deadlock between vsock register mutex and sk lock-AF VSOCK when the vsock linger function is called. This issue stemmed from ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987554 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential AB/BA lock with buffermutex and mmaplock syzbot caught a potential...