Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987345 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

CVE-2025-39797 xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

CVE-2025-39797

CVE-2025-39797 concerns the Linux kernel xfrm duplicate SPI handling. The vulnerability arises when Strongswan triggers an XFRM_NETLINK_ALLOC_SPI request, enabling xfrm_alloc_spi() to return success for an SPI already in use, causing multiple inbound SAs to share the same SPI (distinguished only ...

PT-2021-28896

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.80 through 5.4.118 Description The issue is related to a use-after-free condition in the SPI allocation functions. It was introduced in version 5.4.80 and fixed in version 5.4.119. The actual impact and attack...