Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986565 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986599 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: tusb6010: check return value after calling platformgetresource It will cause...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized bchbtreenodealloc return value, which could result in a null pointer dereference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987247 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987314 advisory. In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign newroot only when removal succeeds removeraw in dmbtreeremove may fail du...

PT-2025-41045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s dmaengine component, specifically within the qcom-adm driver. The slave config function incorrectly compares the peripheral size with the size of a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987104 advisory. In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfptunneladdsharedmac idasimpleget returns an id between min...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986410 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-386224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386224 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2filereaditer Syzbot has reported the following KMSAN splat...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987092 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391040 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet wi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986638 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpolrebindpolicy mpolsetnodemaskmm/mempolicy.c does not set up...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987111 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by...

SUSE CVE-2022-50501

In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcodairamalloc As the codairamalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others...

SUSE CVE-2025-39931

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...

OSV-2025-809 Use-of-uninitialized-value in WebPCleanupTransparentArea

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...

CVE-2023-53569 ext2: Check block size validity during mount

In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superblock has sensible value. Otherwise the shift computing the block size can overflow leading to undefined behavior...

CVE-2023-53534 drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtkdrmcrtc: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

EUVD-2025-32387

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identified by Smatch checker. drivers/net/wireless/microchip/wilc1000/wlancfg.c:184 wilcwlanparseresponseframe error:...

CVE-2025-39931 crypto: af_alg - Set merge to zero early in af_alg_sendmsg

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...