Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989578 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disable we fai...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990366 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards o...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989833 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards o...

CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

CVE-2025-40096

CVE-2025-40096 is a Linux kernel issue in the drm/sched subsystem. The vulnerability is a potential double free in the path that adds dependencies via drm_sched_job_add_dependency() and drm_sched_job_add_resv_dependencies() , where a fence reference may be released twice on failure. The defect ap...

drm/i915: Fix request ref counting during error capture & debugfs dump

...

kernel: tls: separate no-async decryption request handling from async

In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...

CVE-2025-40064

CVE-2025-40064 (kernel): The Linux kernel smc subsystem had a use-after-free in __pnet_find_base_ndev() triggered during connect() via sk_dst_get(dst)->dev. The root cause was not holding the device’s refcount before calling smc_pnet_find_ism_resource() (and smc_pnet_find_roce_resource()). The...

CVE-2025-40024

In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhosttask. vhosttaskcreate creates a task and keeps a reference to its taskstruct. That task may exit early via a signal and its taskstruct will be released. A pending vhosttaskwake...

CVE-2025-40024 vhost: Take a reference on the task in struct vhost_task.

In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhosttask. vhosttaskcreate creates a task and keeps a reference to its taskstruct. That task may exit early via a signal and its taskstruct will be released. A pending vhosttaskwake...

CVE-2025-40024

CVE-2025-40024 (Linux kernel) : The vhost subsystem did not robustly handle a task that exits after vhost_task_create(), risking a wake operation accessing a freed task_struct. The fix is to acquire a reference to the task_struct when creating the thread and release it when the vhost_task is remo...

CVE-2025-40024 vhost: Take a reference on the task in struct vhost_task.

In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhosttask. vhosttaskcreate creates a task and keeps a reference to its taskstruct. That task may exit early via a signal and its taskstruct will be released. A pending vhosttaskwake...

spi: cadence-quadspi: Implement refcount to handle unbind during busy

...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987552 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomq6v5mss: Fix some leaks in q6v5allocmemoryregion The devicenode pointer is return...

CVE-2025-40002

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix use-after-free in tbdpdprxwork The original code relies on canceldelayedwork in tbdpdprxstop, which does not ensure that the delayed work item tunnel-dprxwork has fully completed if it was already running. This...

CVE-2025-40007 netfs: fix reference leak

In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...

CVE-2025-40007

CVE-2025-40007 — Linux kernel netfs reference leak (concrete details) The issue is in netfs: fix reference leak inside the Linux kernel’s netfs code. A commit (20d72b00ca81) changed netfs_alloc_request() to initialize the reference counter to 2 instead of 1, under the assumption that the request’...

CVE-2025-40007 netfs: fix reference leak

In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...

CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unimplemented reference counting mechanism that could cause the kernel to crash during device removal...