Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989987 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989164 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6nhflushexceptions While running the self-tests on a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989839)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989839 advisory. In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Fix the skmemuncharge logic in tcpbpfsendmsg The current sk memory accounting logic in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990149 advisory. In the Linux kernel, the following vulnerability has been resolved: ipgre: test csumstart instead of transport header GRE with TUNNELCSUM will apply local checksum...

CVE-2025-8558: Missing Authentication for Critical Function

Insider Threat Management ITM Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents t...

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iouring/net: Commit partial buffers during retries The ring-provided buffers may only be valid within the single execution context in which they were acquired. iouring handles this by invalidating such buffers during retries...

EUVD-2025-37343

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

django: Potential partial directory-traversal via archive.extract()

A flaw was found in Django. The django.utils.archive.extract function, used by startapp --templateand startproject --template, allowed partial directory-traversal via an archive with file paths sharing a common prefix with the target directory...

UBUNTU-CVE-2025-40031

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

CVE-2025-40069 drm/msm: Fix obj leak in VM_BIND error path

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

CVE-2025-40031 tee: fix register_shm_helper()

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

CVE-2025-40031 tee: fix register_shm_helper()

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

CVE-2025-40031

CVE-2025-40031 affects the Linux kernel where in tee, register_shm_helper() was fixed to correct error handling for iov_iter_extract_pages. The bug could trigger a NULL pointer dereference after a bad input from ioctl(TEE_IOC_SHM_REGISTER) when parts of the buffer aren’t mapped, due to a missing ...

EUVD-2025-36497

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

Linux truncate inode partial folio Data Compromise

The vulnerability of the truncate inodePartialFolio function in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of protected information...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Initialization (CVE-2024-50015)

ext4: dax: Overflowing extents beyond inode size when partially writing. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503434; scriptversion"1.3...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-33847)

f2fs: compress: Released compress inode f2fs image may be corrupted. The reason is partial truncation assume compressed inode has reserved blocks, after partial truncation, valid block count may change w/o .iblocks and .totalvalidblockcount update, resulting in corruption. This plugin only works...