Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990344 advisory. In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata-gpiounbanked is taken from...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989896 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989130 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: sparcspkr - fix refcount leak in bbcbeepprobe offindnodebypath calls offindnodeoptsbypath,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990164 advisory. In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata-gpiounbanked is taken from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989179 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtreet for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990126 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988759 advisory. In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflattendtnodes Commit 78c44d910d3e drivers/of: Fix depth when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988749 advisory. In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO schedule...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: hfs: fixed a general protection fault in hfsfindinit The hfsfindinit method can cause a crash if the tree pointer is NULL: 45.746290T9787 Oops: general protection fault, likely due to a non-canonical address 0xdffffc0000000008...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed an assertion issue when building the free space tree. When building the free space tree with the block group tree feature enabled, an assertion failure may occur like this: BTRFS info device loop0 state M: rebuilding...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: Returns NULL when htblookupleaf encounters an empty rbtree. htblookupleaf has a BUG that can be triggered with the following commands: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mapletree: Fixed the MASTATEPREALLOC flag in maspreallocate. The preallocation flag is temporarily cleared when explicit requests for allocations are made. Existing allocations are already counted against the request through...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There is a race between a task that disables quotas and another task that runs the rescan ioctl. This can lead to a use-after-free of qgroup records from the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: jfs: Upper bound check of the tree index in dbAllocAG When calculating the tree index in dbAllocAG, we never check whether we are out of bounds relative to the size of the tree. This could occur in a scenario where the filesystem...

Astra Linux – Vulnerability in Linux 6.1

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Adjust the subpage bit start based on the sector size. When running machines with a 64k page size and a 16k node size, we began to encounter tree log corruption in production. This occurred because we sometimes did not wri...

Astra Linux - уязвимость в linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match BUG Syzbot reported a crash that an ASSERT got triggered inside preparetomerge. CAUSE The root cause of the triggered ASSERT is we can have a race between quota tree creation and...

btrfs: do not assert we found block group item when creating free space tree

...

EUVD-2022-55674

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the BPI component via the info URL field. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

SUSE CVE-2025-40100

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...