Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987182 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfsgetclient None of the callers are expecting NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987178 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxdcmdexec...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987044 advisory. In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpfjitbinaryfree function requires a non-NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987172 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: niusb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986453 advisory. In the Linux kernel, the following vulnerability has been resolved: ipw2x00: Fix potential NULL dereference in libipwxmit crypt and crypt-ops could be null, so we ne...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380009 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-384161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384161 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4processcbupdate @ses is initialized to NULL. If...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987198 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL deref in cifscomposemountoptions The optional @ref parameter might contain an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986441 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...

RockyLinux 10 : libxml2 (RLSA-2025:10630)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10630 advisory. libxml: Heap use after free UAF leads to Denial of service DoS CVE-2025-49794 libxml: Null pointer dereference leads to Denial of service DoS...

SUSE CVE-2025-39936

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to sevplatformshutdownlocked When 9770b428b1a2 "crypto: ccp - Move devinfo/err messages for SEV/SNP init and shutdown" moved the error messages dumping so that they don't need to be...

CVE-2023-53566

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix null deref on element insertion There is no guarantee that rbprev will not return NULL in nftrbtreegcelem: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEM...

CVE-2022-50502

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2023-53566

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix null deref on element insertion There is no guarantee that rbprev will not return NULL in nftrbtreegcelem: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEM...

UBUNTU-CVE-2023-53555

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damofilter-list from damosnewfilter damosnewfilter is not initializing the list field of newly allocated filter object. However, DAMON sysfs interface and DAMONRECLAIM are not initializing it after calli...

CVE-2022-50502

...

CVE-2022-50502

The connected sources identify CVE-2022-50502 as a Linux kernel issue in the mm subsystem related to /proc/pid/smaps_rollup. The root cause described is a null-deref that can occur when there are no VMAs, traced to the commit that converted show_smaps_rollup to a single value seq_file (commit 258...

CVE-2023-53566 netfilter: nft_set_rbtree: fix null deref on element insertion

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix null deref on element insertion There is no guarantee that rbprev will not return NULL in nftrbtreegcelem: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEM...

CVE-2023-53566 netfilter: nft_set_rbtree: fix null deref on element insertion

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix null deref on element insertion There is no guarantee that rbprev will not return NULL in nftrbtreegcelem: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEM...

CVE-2023-53555

CVE-2023-53555 relates to the Linux kernel (Damon/DAMON subsystem). The issue: in damos_new_filter(), the newly allocated filter object’s list field was not initialized, and the sysfs DAMON interface and DAMON_RECLAIM path did not reinitialize it after calling damos_new_filter(). This allowed acc...