kernel: igb: Fix potential invalid memory access in igb_init_module()

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when this happened, the dcanotifier needs to be unregistered, otherwise the dcanotifier can be called when igb fails to install, resulti...

kernel: wifi: ath12k: fix uaf in ath12k_core_init()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12kcoreinit When the execution of ath12kcorehwgroupassign or ath12kcorehwgroupcreate fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigge...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990589 advisory. In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990426 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990537 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Security update for kernel-livepatch-MICRO-6-0_Update_8

This update for kernel-livepatch-MICRO-6-0Update8 fixes the following issues: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 CVE-2025-38618: vsock: Do not allow binding to VMADDRPORTANY bsc1249207 CVE-2025-38617: net/packet: fix a race in packetsetring and...

Security update for kernel-livepatch-MICRO-6-0_Update_7

This update for kernel-livepatch-MICRO-6-0Update7 fixes the following issues: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 CVE-2025-38618: vsock: Do not allow binding to VMADDRPORTANY bsc1249207 CVE-2025-38617: net/packet: fix a race in packetsetring and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989195 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988937 advisory. In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990368 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989990 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989060 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989307 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release flow rule object from commit path No need to postpone this to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989891 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: The warning caused by the missing unregister notifier has been fixed. This warning was triggered during testing on v6.16: notifier Callback ftracesuspendnotifiercall is already registered WARNING: CPU: 2, PID: 86, i...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa – Replaced the mutex with a rwlock to avoid sleep in atomic contexts. The current use of a mutex to protect access to the notifier hashtable can lead to issues in atomic contexts. This results in the following...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: A memory leak was fixed by freeing the notifier callback node after it was released from the hashtable entry. The commit e0573444edbf “Firmware: armffa: Add interfaces to request notification callbacks” adds...

EUVD-2023-59996

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in niwriteinode Syzbot reports a NULL dereference in niwriteinode. When creating a new inode, if allocation fails in miinit function called in miformatnew function, mi-mrec is set to NULL. In the...

EUVD-2022-55649

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fix module PLTs with mcount Li Huafei reports that mcount-based ftrace with module PLTs was broken by commit: a6253579977e4c6f "arm64: ftrace: consistently handle PLTs." When a module PLTs are used and a module is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987651 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...