Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986989)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986989 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: disable spectral scan during spectral deinit When ath11k modules are removed using rmmod...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987109 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fix null-pointer-dereference in slgtclean When the driver fails at allochdlcdev,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986404 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible use-after-free in HFCcleanup This module's remove path calls deltimer. Howeve...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-401357)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-401357 advisory. In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987151 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4fcrecordmodifiedinode Current code does not fully takes care of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986868 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix wrong listdel in smclgrcleanupearly smclgrcleanupearly meant to delete the link grou...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987390 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ibcorecleanup KASAN reported a null-ptr-deref error: KASAN:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382740 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2setbufferuptodate When doing cleanup, if flags without...

kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

LionCoders SalePro POS security vulnerability

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.4.8, which stems from improper cleanup of the customer name parameter and could lead to a stored cross-site scripting...

Fixed in Apache Tomcat 9.0.110

Low: Delayed cleaning of multipart upload temporary files may lead to DoS CVE-2025-61795 If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to local storage were not cleaned up immediately but left for the...

D-Link DIR-852 Router Arbitrary Command Execution

The vulnerability of the ssdpcgimain function in the htodcs/cgibin module of the D-Link DIR-852 router’s microprogramming system is related to the lack of measures taken at the control level to manage data cleanup. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

D-Link DSL-7740C xmldbc() Privilege Escalation

The vulnerability of the xmldbc function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

SUSE CVE-2022-50474

In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macioaddonedevice Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically. It needs to be freed when ofdeviceregist...

SUSE CVE-2022-50482

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was seen with a kernel prior to commit ee2653bbe89d "iommu/vt-d: Remove domain and devinfo mempool" when there was a failure in initdmars,...

SUSE CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtwcoredeinit', shrink critical section in the latter by freeing...

SUSE CVE-2023-53594

In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...

SUSE CVE-2023-53606

In the Linux kernel, the following vulnerability has been resolved: nfsd: clean up potential nfsdfile refcount leaks in COPY codepath There are two different flavors of the nfsd4copy struct. One is embedded in the compound and is used directly in synchronous copies. The other is dynamically...

[SECURITY] Fedora 41 Update: containernetworking-plugins-1.8.0-2.fc41

Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...

[SECURITY] Fedora 42 Update: containernetworking-plugins-1.8.0-2.fc42

Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...