USN-7835-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

A null pointer dereference exists in the linux kernel such that in objstockflushrequired:stock-cachedobjcg can be reset between the check and dereference, resulting in damage to the availability of the system...

Ubuntu: Security Advisory (USN-7849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption...

CVE-2023-43000

CVE-2023-43000 is a use-after-free vulnerability in WebKit/Web content processing that can lead to memory corruption. Affected products include Apple's macOS/iOS/iPadOS and Safari/WebKit variants, with fixes shipped in macOS Ventura 13.5, iOS 16.6/iPadOS 16.6, Safari 16.6, and iOS 15.8.7/iPadOS 1...

CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43434

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packag...

CVE-2025-43478

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination...

Apple多款产品 资源管理错误漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is a set of operating systems developed for mobile devices. apple macOS is a set of specialized operating systems develope...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990327 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989532 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drmgemshmemmmap doesn't own this reference,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988758 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: make sure wait for page writeback in memoryfailure Our syzkaller trigger the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988953 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix memleak in tcpbpfsendmsg while sk msg is full If tcpbpfsendmsg is running while...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989521 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989547 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: fix memory leak in mcbausb Syzbot reported memory leak in SocketCAN driver for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989176 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use after free ...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the calculatesizes function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the writing of buffers outside of the system’s protected area. Exploiting this vulnerability could allow an attacker to damage memory resources or cause service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989883 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps page tabl...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libssh vulnerability (USN-7849-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7849-1 advisory. Philippe Antoine discovered that libssh did not properly manage memory when calculating a session ...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS 26.1 and iPadOS 26.1. The vulnerabilities affected several privacy and security issues, including unauthorized access to user data, the risk of data exfiltration, and memory management vulnerabilities that could lead to unexpected system crashes. Attackers...