Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the GPU page fault that occurs after hibernation with PF passthrough. In a PF passthrough environment, after hibernation and then resuming, coralgemm may cause a GPU page fault. Mode1 reset occurs during...

CVE-2026-22786

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpointcontinue.go file, the MakeFile function accepts a fileName...

Arbitrary File Upload

Overview github.com/flipped-aurora/gin-vue-admin/server/utils is a Vue-based admin system Affected versions of this package are vulnerable to Arbitrary File Upload via the MakeFile function in the breakpoint resume upload process. An attacker can write arbitrary files to any directory by supplyin...

CVE-2026-22786 Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpointcontinue.go file, the MakeFile function accepts a fileName...

PT-2026-2304

Name of the Vulnerable Software and Affected Versions Gin-vue-admin versions prior to 2.8.8 Description Gin-vue-admin, a backstage management system based on vue and gin, contains a path traversal issue in the breakpoint resume upload functionality. The vulnerability exists because the MakeFile...

The vulnerability of the usbnet_resume_rx() function in the drivers/net/usb/usbnet.c module of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the usbnetresumerx function in the drivers/net/usb/usbnet.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Exploit for Out-of-bounds Write in Mikrotik Routeros

Mikrotik Exploit Scan and Export RouterOS Password A security...

CVE-2023-25965

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Upload Resume: from n/a through 1.2.0...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000503 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure traceclockglobal to never block It was reported that a fix to the ring buffe...

PT-2026-8161

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18 Description The Linux kernel contained a flaw within the ice network driver where a NULL pointer dereference could occur in the ice vsi set napi queues function during resume from suspend. This issue could...

PT-2026-8121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.6.98-android15-8-g0b1d2aee7fc3 Description The Linux kernel contains a flaw in the arm64 architecture related to Control Flow Integrity CFI. A Data Abort DABT can occur on Android-based systems during resume fr...

PT-2026-4671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the xhci sideband endpoint removal process. Specifically, the xhci sideband remove endpoint function incorrectly assumes the endpoint is running a...

PT-2026-27660

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds dev lock and then calls pm runtime resume and get, which waits...

PT-2026-8196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Realtek r8152 USB network adapter can trigger a device reset during the reset process, potentially leading to a deadlock. This occurs because the rtl8152 resume function calls reset...

SUSE CVE-2022-50843

In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clonedtr Dmclone also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in clonedtr...

SUSE CVE-2022-50889

In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dmintegritydtr Dmintegrity also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in dmintegritydtr...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993165 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992933 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts before resuming device iwl4965 fails upon resume from...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992968)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992968 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused d...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993220 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a warning observed...