Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986889 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit Use clkdisableunprepare in the error pat...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394240 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpgalloc In tpgalloc, resources should be deallocated in ea...

"Your Doctor Is Spying on You": An Analysis of Data Practices in Mobile Healthcare Applications

Mobile healthcare mHealth applications promise convenient, continuous patient-provider interaction but also introduce severe and often underexamined security and privacy risks. We present an end-to-end audit of 272 Android mHealth apps from Google Play, combining permission forensics, static...

PT-2025-44395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to disconnected dentries during unmount operations. Specifically, when a user calls open by handle at on an inode not cached, a disconnected dent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-418583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-418583 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986785)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986785 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414453 advisory. Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414438 advisory. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414666 advisory. An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403236 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987106 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit:...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987430 advisory. Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987317 advisory. In the Linux kernel, the following vulnerability has been resolved: dma-buf/syncfile: Don't leak fences on merge failure Each addfence call does a dmafenceget on the...

PT-2025-41037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1+ 189 Description The Linux kernel contains a flaw within the mpt3sas transport port add function in the SCSI subsystem. Specifically, if sas rphy add fails, the necessary resource freeing via sas rphy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414455 advisory. Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414457 advisory. Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

CVE-2025-0606

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

CVE-2025-0606

Logo Cloud by Logo Software Inc. is affected by CVE-2025-0606 due to an authorization bypass caused by a user-controlled key. This flaw enables forceful browsing and potential resource disclosure on Logo Cloud versions before 0.67. The issue’s root cause is the improper handling of keys that gran...

CVE-2025-0606 IDOR in Logo Software's Logo Cloud

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

SUSE CVE-2022-50484

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at th...