ext4: guard against EA inode refcount underflow in xattr update

...

CVE-2025-40203 listmount: don't call path_put() under namespace semaphore

In the Linux kernel, the following vulnerability has been resolved: listmount: don't call pathput under namespace semaphore Massage listmount and make sure we don't call pathput under the namespace semaphore. If we put the last reference we're fscked...

CVE-2025-40190 ext4: guard against EA inode refcount underflow in xattr update

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

CVE-2025-40186 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqskfastopenremove in tcpconnrequest. syzbot reported the splat below in tcpconnrequest. 0 If a listener is closed while a TFO socket is being processed in tcpconnrequest, inetcskreqskqueueadd does not set reqsk-...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an incorrect call to reqskfastopenremove in tcpconnrequest, which could result in a reference count underfl...

RLSA-2025:19105 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry CVE-2025-39730 kernel: ALSA: hda/ca0132: Fix buffe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990410 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990569 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989480 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered wh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990334 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 xfrm: Force ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988880 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pcigetdomainbusandslot says, it returns a P...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989846 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990005 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbdallocconfig and module removal When nbd module is being removing,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989903 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989022 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in hasexternalpci foreachpcidev is implemented by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989392 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989918 advisory. In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak foreachpcidev is implemented by pcigetdevice...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990356 advisory. In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an...