Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387086)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387086 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between freeswapandcache and swapoff There was previously a theoretical windo...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-423736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423736 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6getifaddr and ipv6deladdr Although ipv6getifaddr walks...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987090 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987100 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987274 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function works a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986403 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifsgetroot When cifsgetroot fails during...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381332 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6probe syzbot caught a NULL dereference in rt6probe ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987369 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantechchangereportid The array param in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987171 advisory. In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmigetvariable We can get EFI variables without fetching the attribute, ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-380104)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380104 advisory. In the Linux kernel, the following vulnerability has been resolved: netns: Make getnetns handle zero refcount net Syzkaller hit a warning: refcountt: addition on 0;...

CVE-2025-52021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

CVE-2025-44823

Nagios Log Server (before 2024R1.3.2) is vulnerable: unauthenticated? No—authenticated users with access to the API can call /nagioslogserver/index.php/api/system/get_users to retrieve cleartext admin API keys. The underlying issue exposes user accounts and API keys, enabling full system compromi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987087 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadencenanddtprobe It will cause...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380009 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403670 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987092 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986875 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987347 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390409 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .gettxpower Avoid potentially crashing...