Entr'ouvert Lasso lasso_provider_verify_saml_signature denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2194 Entr'ouvert Lasso lassoproviderverifysamlsignature denial of service vulnerability November 5, 2025 CVE Number CVE-2025-46404 SUMMARY A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5....

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988678)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988678 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988993 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextod...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989555 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989199 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: core: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989061 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988810 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes In...

Important: kmod-nvidia-open-dkms

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

Important: libnvidia-nscq

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989271 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null pointer dereference on pointer edp The initialization of pointer dev dereferenc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989783 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference In tpg110getmodes, the return...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989079 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fix null-pointer-dereference in slgtclean When the driver fails at allochdlcdev,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989642 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: tusb6010: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990123 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988936 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988687 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: davincivoicecodec: Fix possible null-ptr-deref davincivcprobe It will cause null-ptr-deref...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988716 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference This patch fixes a tunneldst null point...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988886 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989029 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988999 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a null pointer access when the smcrreg pointer is NULL In certain types of chips,...