Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989174 advisory. In the Linux kernel, the following vulnerability has been resolved: can: dev: cangetechoskb: prevent call to kfreeskb in hard IRQ context If a driver calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988983 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990190 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989463 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memory leak during stateful obj update stateful objects can be updated...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989123 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989929 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988853 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel: fix a possible null pointer dereference In versatilepanelgetmodes, the return value of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990236 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989816 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the getIssuerCertificate function. An attacker can gain unauthorized access to Secrets in other namespaces by bypassing RBAC restrictions. This is only exploitable if the attacker has permission to create...

CVE-2025-54333

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the getvs4lprofilernode function...

GHSA-7VJM-6QGQ-3MRQ Shaman has soundness issues and is unmaintained

shaman::cryptoutil::writeu64vle and other functions mentioned above cannot garantee memory safety of getunchecked later if both length are zero. shaman is unmaintained...

Remote code execution via transformers_utils/get_config

This report is not public...

[SECURITY] Fedora 42 Update: rust-get-size-derive2-0.7.0-1.fc42

Derives the GetSize trait...

[SECURITY] Fedora 42 Update: rust-get-size2-0.7.0-2.fc42

Determine the size in bytes an object occupies inside RAM...

[SECURITY] Fedora 41 Update: rust-get-size2-0.7.0-2.fc41

Determine the size in bytes an object occupies inside RAM...

[SECURITY] Fedora 41 Update: rust-get-size-derive2-0.7.0-1.fc41

Derives the GetSize trait...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here --- WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc PC: newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc f2fsallocatedatablock+0xa54/0xe...

CVE-2025-10487 Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the selectone function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be calle...

SUSE CVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...