CLSA-2025-1763991095 Fix of 25 CVEs

Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21772 - partitions: mac: fix handling of bogus partition table CVE-url: https://ubuntu.com/security/CVE-2025-22079 - ocfs2: validate ltreedepth to avoid out-of-bounds access CVE-url: https://ubuntu.com/security/CVE-2024-58014 ...

D-Link DIR-816L Buffer Overflow Vulnerability

DIR-816L is a wireless router product from D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816L version 206b09beta, which originates from the soapcgimain function in the /soap.cgi file that does not perform a valid bounds check on input data. An attacker could use this...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49895)

drm/amd/display: vulnerability caused by adding a check to ensure the index 'i' is within bounds before accessing transfer function points in cmhelpertranslatecurvetodegammahwformat, preventing buffer overflow errors. This plugin only works with Tenable.ot. Please visit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990901 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160copyvideo The subtract in this condition is reverse...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990858 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out o...

kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

netlink: Bounds-check struct nlmsgerr creation

...

CLSA-2025-1762538077 dpdk: Fix of CVE-2024-11614

CVE-2024-11614: add bounds check in vhostdequeueoffload to prevent checksum computation overflow...

CVE-2025-20749

In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800...

CVE-2025-20734

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-411...

CVE-2025-20733

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138...

CVE-2025-20738

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-403...

CVE-2025-20742

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID:...

CVE-2025-54329

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message including an SMS...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989546 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bound...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989702 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990156 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kvdpm.c Adds bounds check for sumovidmappingentry. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989904 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kvdpm.c Adds bounds check for sumovidmappingentry. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989500 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989145 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...