kernel: acct: perform last write from workqueue

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990533 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc The call to lpfcsli4resumerpi in...

CVE-2025-12402

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

PT-2025-51643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/amdgpu subsystem that can lead to a GPU page fault after hibernation on PF passthrough environments. Specifically, after resuming from hibernation...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990318 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989843 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989618 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988703 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: remove aqnicdeinit when resume aqnicdeinit has been called while suspending, so we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989767 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: remove aqnicdeinit when resume aqnicdeinit has been called while suspending, so we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989964 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc The call to lpfcsli4resumerpi in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990299 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc The call to lpfcsli4resumerpi in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990302 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990052 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989128 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk-vqs should be freed before we...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989675 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989504 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential memory leak in DMUB hwinit Why On resume we perform DMUB hwinit...

CVE-2025-40107

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is similar to the vulnerability in the mcp251x driver, which was fixed in commit 03c427147b2d "can: mcp251x: fix resume fr...

CVE-2025-12402

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

WordPress LinkedIn Resume plugin <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin LinkedIn Resume versions = 2.00...

CVE-2025-12402 LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...