Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010834)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010834 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says,...

MAL-2026-2865 Malicious code in @sie-ppr-web-checkout/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977089aabb00f7d390dd6bf7ad3e9038c4998ec2ccf93a2e38016f525c32f368 The package @sie-ppr-web-checkout/app was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sie-ppr-web-checkout/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977089aabb00f7d390dd6bf7ad3e9038c4998ec2ccf93a2e38016f525c32f368 The package @sie-ppr-web-checkout/app was found to contain malicious code. Source: ghsa-malware...

The vulnerability of the ppr_notifier() function in the drivers/iommu/amd/iommu_v2.c file of the Linux operating system’s IOMMU driver allows a hacker to trigger a service failure.

The vulnerability of the pprnotifier function in the drivers/iommu/amd/iommuv2.c file of the Linux IOMMU driver module is related to errors during link generation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

CVE-2025-59472

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

EUVD-2022-55649

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fix module PLTs with mcount Li Huafei reports that mcount-based ftrace with module PLTs was broken by commit: a6253579977e4c6f "arm64: ftrace: consistently handle PLTs." When a module PLTs are used and a module is...

Linux Distros Unpatched Vulnerability : CVE-2022-50505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot...

SUSE CVE-2022-50505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

UBUNTU-CVE-2022-50505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2022-50505

CVE-2022-50505 (Linux kernel) fixes a refcount leak in iommu/amd by correcting usage of pci_get_domain_bus_and_slot() which increments the PCI device refcount. The caller must call pci_dev_put() when finished; the patch ensures pci_dev_put() is invoked before returning from ppr_notifier() to avoi...

CVE-2022-50505 iommu/amd: Fix pci device refcount leak in ppr_notifier()

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2023-53326

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER with a NULL ptregs, which from my arguably very short checking is not commonly done for other archs. This is fine, except when...

CVE-2023-53326 powerpc: Don't try to copy PPR for task with NULL pt_regs

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER with a NULL ptregs, which from my arguably very short checking is not commonly done for other archs. This is fine, except when...

Intel Server D50DNP 安全漏洞

Intel Server Products is a family of products from Intel Corporation USA. A security vulnerability exists in the Intel Server D50DNP PprRequestLog module that stems from an incorrect input validation issue. It could allow a privileged user to achieve privilege escalation via local access...

PT-2024-19377 · Intel · Intel Server D50Dnp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP Family products affected versions not specified Description: The issue is related to improper input validation in the PprRequestLog module in UEFI firmware, which may allow a privileged user to enable escalation of...

PT-2025-40739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to a PCI device reference count leak within the ppr notifier function in the iommu/amd module. The pci get domain bus and slot function...

PT-2025-40208

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when unbinding a pasid, potentially leading to a refcount decrement hitting zero. The pasid state object uses a refcount that is incremented on page present...

PT-2023-34450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a pci device refcount leak in the ppr notifier function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a pci device refcount leak in the ppr notifier function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...