Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986429 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986999 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix missing ofnodeput in mt2701wm8960machineprobe This node pointer is returned b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986893 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: sparcspkr - fix refcount leak in bbcbeepprobe offindnodebypath calls offindnodeoptsbypath,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387673 advisory. In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx point...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986829 advisory. In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutexinit location Syzbot reported, that mxl111sfctrlmsg uses uninitializ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987096 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpprobethreshold. While reading sysctltcpprobethreshold, it ca...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381332 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6probe syzbot caught a NULL dereference in rt6probe ...

PT-2025-41030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the fsl pamu probe function within the iommu/fsl pamu module of the Linux kernel. Specifically, the function returns prematurely when create csd fails, resultin...

CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...

RockyLinux 8 : kernel-rt (RLSA-2025:16920)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16920 advisory. kernel: nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 kernel: netsched: hfsc: Fix a UAF vulnerability in class handling...

SUSE CVE-2022-50480

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353smcprobe The break of foreachavailablechildofnode needs a corresponding ofnodeput when the reference 'child' is not used anymore. Here we do not need to call ofnodeput in fail path...

SUSE CVE-2022-50492

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tearing down the DRM device so that stale pointers to deallocated structures would be accessed on the next tear down e.g. after a second late...

SUSE CVE-2022-50500

In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed If some items in nsimdevresourcesregister fail, memory leak will occur. The following is the memory leak information. unreferenced object...

SUSE CVE-2023-53565

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in 2 scenarios: 1. brcmfpciepmleaveD3 calling brcmfpcieprobe to reprobe the device. 2. If a user tries to manually bind the driver from sysf...

SUSE CVE-2023-53588

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't eve...

SUSE CVE-2023-53607

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Fix BUGON in probe function The snddmabuffer.bytes field now contains the aligned size, which this sndBUGON did not account for, resulting in the following: 9.625915 ------------ cut here ------------ 9.633440...

SUSE CVE-2023-53610

In the Linux kernel, the following vulnerability has been resolved: irqchip: Fix refcount leak in platformirqchipprobe ofirqfindparent returns a node pointer with refcount incremented, We should use ofnodeput on it when not needed anymore. Add missing ofnodeput to avoid refcount leak...

SUSE CVE-2025-39951

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

um: virtio_uml: Fix use-after-free after put_device in probe

...

CVE-2023-53607

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Fix BUGON in probe function The snddmabuffer.bytes field now contains the aligned size, which this sndBUGON did not account for, resulting in the following: 9.625915 ------------ cut here ------------ 9.633440...