Detections
Analytics
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992233)
medium Nessus Plugin ID 280381
Synopsis
The Unity Linux host is missing one or more security updates.Description
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992233 advisory.In the Linux kernel, the following vulnerability has been resolved:
drm/msm/mdp5: Don't leak some plane state
Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a (drm/atomic: Fix freeing connector/plane state too early by tracking commits, v3.)
Fix it by using the right helpers.
Patchwork: https://patchwork.freedesktop.org/patch/551236/
Tenable has extracted the preceding description block directly from the Unity Linux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel package.See Also
http://www.nessus.org/u?c841bd9e
Plugin Details
Severity: Medium
ID: 280381
File Name: unity_linux_UTSA-2025-992233.nasl
Version: 1.1
Type: local
Published: 12/30/2025
Updated: 12/30/2025
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2023-53324
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/UOS-Server/release, Host/UOS-Server/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 12/30/2025
Vulnerability Publication Date: 9/4/2021
Reference Information
CVE: CVE-2023-53324