Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-392950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392950 advisory. In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: make sure to pull inner header in iptunnelrcv Apply the same fix than ones found i...

The vulnerability of the tls_rx_msg_size() function in the Linux kernel’s TLS component allows a attacker to cause a service failure.

The vulnerability of the tlsrxmsgsize function in the Linux kernel’s TLS component is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986637)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986637 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity During our fuzz testing of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986564 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987297 advisory. In the Linux kernel, the following vulnerability has been resolved: can: pchcan: pchcanrxnormal: fix use after free After calling netifreceiveskbskb, dereferencing s...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987147 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987033 advisory. In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix memory leak in presterarxtxswitchinit When presterasdmaswitchinit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986693 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2rx The skb is delivered to napigroreceive...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-389644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-389644 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rxdatareassembly skb on NCI device cleanup rxdatareassembly skb is stored during N...

kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

...

CVE-2023-53553

CVE-2023-53553 is a Linux kernel issue tied to Hyper-V HID handling. The vulnerability arises from a fortify memcpy-related codepath in HID Hyper-V (mousevsc_on_receive) where a __write_overflow_field warning could be triggered, prompting a patch to rework the code to avoid the warning. Connected...

CVE-2023-53553 HID: hyperv: avoid struct memcpy overrun warning

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...

CVE-2022-50483 net: enetc: avoid buffer leaks on xdp_do_redirect() failure

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of 2 refcount values on its page. We are the owner of...

CVE-2022-50483

CVE-2022-50483 concerns a Linux kernel issue in the net: enetc path where, on XDP redirects, a page reference counting race could leak pages. The root cause: enetc_flip_rx_buff() could be executed before xdp_do_redirect() completes, causing page refcounts to reach 2 (or 0 on some paths) and enabl...

AZL-75296 CVE-2025-39948 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The iceputrxmbuf function handles calling iceputrxbuf for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver...

AZL-75336 CVE-2025-39942 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...

AZL-68139 CVE-2025-39942 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...

CVE-2025-39942

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...

UBUNTU-CVE-2025-39943

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate dataoffset and datalength field of smbdirectdatatransfer If dataoffset and datalength of smbdirectdatatransfer struct are invalid, out of bounds issue could happen. This patch validate dataoffset and...