Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414657 advisory. In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414472 advisory. In locksocknested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414506 advisory. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allow...

ALSA-2025:17429 Important: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...

CVE-2025-50505

CVE-2025-50505 affects Clash Verge Rev up to 2.2.3 (fixed in 2.3.0). An unauthenticated HTTP API on 127.0.0.1:33211 (/start_clash) allows local users to submit arbitrary bin_path, config_dir, config_file, and log_file values which are passed to the service process (clash-verge-service) for execut...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414551 advisory. In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System...

CVE-2025-50505

Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414471 advisory. In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414357 advisory. In l2capchanput of l2capcore, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional executi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414612 advisory. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414540 advisory. looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kerne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pam (UTSA-2025-986091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986091 advisory. A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414486 advisory. A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414334 advisory. A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: microcode_ctl (UTSA-2025-986097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986097 advisory. Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414646 advisory. A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AFVSOCK implementation are caused by wrong locking in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414469 advisory. In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with...

RHEL 8 : open-vm-tools (RHSA-2025:17510)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:17510 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680596 advisory. multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to acces...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414419 advisory. A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured this is not the...