kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime()

A flaw was found in the Linux kernel's posix-clock component. A local attacker with low privileges could exploit a missing validation check in the pcclocksettime function. By providing invalid time values, such as a negative tvsec or an out-of-range tvnsec, the attacker could cause certain driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990572 advisory. In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc The 'profilepc' function is used for timer-based...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989821 advisory. In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc The 'profilepc' function is used for timer-based...

Malicious Package

Overview pc-experience-fe-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in pc-experience-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-37539

Malicious code in pc-experience-fe-components npm...

MAL-2025-49342 Malicious code in pc-experience-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...

MINI-PC3G-R2JX-VPG3

Bulletin has no description...

USN-7835-4 linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-42096)

In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SIMATIC Devices Improper Locking (CVE-2024-50210)

In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pcclocksettime If getclockdesc succeeds, it calls fget for the clockid's fd, and get the clk-rwsem read lock, so the error path should release the lock to make the lock balance...

CVE-2025-40020: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 which is the case for PC CAN FD interfaces supported by this driver. mkl: update subject, apply...

Insyde BIOS Buffer Overflow in certain HP ARM-Based PCs

A potential security vulnerability has been identified in certain ARM-based HP PC products using Insyde BIOS InsydeH20 UEFI Firmware, which might allow arbitrary code execution. Insyde has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and...

CVE-2025-10581

A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-8486

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-26859

RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-8486

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-8486

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-10581

A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-10581

A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...