Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989180 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989571 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port A pending hrtime...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989080 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989185 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989336 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroywork queue before calling bnx2fcinterfaceput The bnx2fcdestroy functio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989807 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989564 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use ttyportdestroy to destroy port In goldfishttyprobe, the port initialized throu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989627 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tt...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988793 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 tty: serialcore: convert...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988882 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use ttyportdestroy to destroy port In goldfishttyprobe, the port initialized throu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989145 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989980 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an...

SUSE-SU-2025:3935-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002330 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...

SUSE-SU-2025:3927-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002338 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...

PT-2025-45054

Name of the Vulnerable Software and Affected Versions LinkAce versions prior to 2.4.0 Description LinkAce is a self-hosted archive to collect website links. The htmlKeywordsFromUrl function within the FetchController class accepts user-provided URLs and makes HTTP requests without validating the...

📄 WatchGuard Firebox Default Credentials / SSH Access

The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 using the default credentials. This configuration exposes the device to remote attackers who can gain full administrative access without prior authentication. CVE-2025-5939...

net/mlx5: Fix peer devlink set for SF representor devlink port

...

CVE-2025-12599

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12599

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12599

The CVE affects Azure Access Technology BLU-IC2 and BLU-IC4 up to version 1.19.5, where multiple devices share the same SDKSocket key over TCP/5000. The root cause is the reuse of a shared SDKSocket secret, which can lead to unauthorized access or compromise of device communications (affecting co...