Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-389615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-389615 advisory. In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020probe KASAN reported a null-ptr-deref issue when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987326 advisory. In the Linux kernel, the following vulnerability has been resolved: blktrace: Fix uaf in blktrace access after removing by sysfs There is an use-after-free problem...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386515 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect references to superblock parameters exposed in sysfs The superblock buffers of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986660 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then...

PT-2025-41120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The lio target nacl info show function within the iSCSI target component does not properly validate buffer lengths when using sprintf in a loop to display details for each iSCSI...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986988 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irqwork has completed before th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986519 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-382063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382063 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface Among the attribute file callback routines in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986855 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986738)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986738 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is set via sysfs This fixes a regression added with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-396209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-396209 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986489 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...

SUSE CVE-2022-50473

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobjectinitandadd In cpufreqpolicyalloc, it will call uninitialed completion in cpufreqsysfsrelease when kobjectinitandadd fails. And that will cause a crash such as the following page fault in...

SUSE CVE-2022-50475

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Make sure "ibport" is valid when access sysfs node The "ibport" structure must be set before adding the sysfs kobject, and reset after removing it, otherwise it may crash when accessing the sysfs node: Unable to handle...

SUSE CVE-2023-53550

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec "cpufreq: amd-pstate: move to use busgetdevroot" the "amdpstate" attributes where moved from a dedicated kobject to the cpu root kobject. While the...

SUSE CVE-2023-53594

In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...

SUSE CVE-2023-53612

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotplug notifiers, while the "driver" effectively just wraps an allocation...

SUSE CVE-2025-39939

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix memory corruption when using identity domain zpcigetiommuctrs returns counter information to be reported as part of device statistics; these counters are stored as part of the s390domain. The problem, however, is...

CVE-2023-53594

In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...

CVE-2023-53565

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in 2 scenarios: 1. brcmfpciepmleaveD3 calling brcmfpcieprobe to reprobe the device. 2. If a user tries to manually bind the driver from sysf...