CVE-2025-63835

The CVE-2025-63835 entry concerns a stack-based buffer overflow in the Tenda AC18 (v15.03.05.05_multi) guestSsid parameter of the /goform/WifiGuestSet interface. The issue arises from insufficient validation of the guestSsid length, allowing an attacker to send oversized data that can cause a dev...

UBUNTU-CVE-2025-40109

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

CVE-2025-40109

The CVE-2025-40109 entry affects the Linux kernel crypto RNG path. Root cause: set_ent is not guaranteed to be present in all paths, even though only DRBG provides it. The fix ensures set_ent is always present. Impact and exploit specifics are not detailed in the provided documents. Remediation: ...

CVE-2025-40109 crypto: rng - Ensure set_ent is always present

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

SMB2 Set EA DoS

The vulnerability of the smb2setea function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux kernel, relates to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990489 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990517 advisory. In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in setflicker Syzkaller reported the following issue:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990459 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: tty: serial: Fix deadlock in sa1100settermios There is a deadlock in sa1100settermios,...

GHSA-FRMV-PR5F-9MCR Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

netfilter Heap Buffer Overflow DoS

The vulnerability of the pipaporefill function in the net/netfilter/nftsetpipapo.c module of the netfilter component of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause a service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989435 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid journal no-space deadlock by reserving 1 journal bucket The journal no-space deadlo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989932 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988814 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989866)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989866 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload ipset.ko...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990285 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989574 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for...

Tenda AC23 SetVirtualServerCfg File Buffer Overflow Vulnerability

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 has a buffer overflow vulnerability, the vulnerability stems from the file...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989591 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: fix NULL deref in fifosetlimit syzbot reported another NULL deref in fifosetlimit 1 I...