Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly freeing resources when memory allocation fails in the rtwinitcmdpriv function, which could lead...

PT-2025-41176

Name of the Vulnerable Software and Affected Versions NASA’s Interplanetary Overlay Network ION version 4.1.3 Description A specially crafted BPv7 bundle with a malformed extension block can lead to a Denial-of-Service DoS condition in ION-DTN. The issue stems from uncontrolled memory allocation...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414684 advisory. A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986458 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407080 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in updateeventsingroup kasprintf returns a pointer to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-381976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381976 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG and diAlloc In dbNextAG , there is no check for the case where...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-387861)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387861 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/setbit operating in non-allocated memory There is a potential...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380132 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-404093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-404093 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot reported that pagesymlink, call...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986863)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986863 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devmkcalloc Because of the possible failure of the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-384214)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384214 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtkdrmgemobj Add a check to mtkdrmgeminit if we attempt to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-379453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-379453 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in sendacknowledge Handle memory allocation failu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414638 advisory. An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414352 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. lkdtmARRAYBOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc and will cause...

SUSE CVE-2025-11274

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been...

SUSE CVE-2025-39935

In the Linux kernel, the following vulnerability has been resolved: ASoC: codec: sma1307: Fix memory corruption in sma1307settingloaded The sma1307-set.headersize is how many integers are in the header there are 8 of them but instead of allocating space of 8 integers we allocate 8 bytes. This lea...

Interger Overflow

executorch is vulnerable to integer overflow. The vulnerability is due to improper handling of integer calculations during model loading, which allows an attacker to cause smaller-than-expected memory allocations leading to potential code execution or other unintended effects...

EUVD-2025-32517

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...

CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...