ROS-20260120-7335

A vulnerability in the bpfprogram function of the driver drivers/net/ppp/pppgeneric.c of the Linux kernel is related to the use of an uninitialized pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000768 advisory. Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002942 advisory. Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002585 advisory. Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and...

kernel: ppp: reject claimed-as-LCP but actually malformed packets

The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...