ALSA-2025:21926 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm: slub: avoid wake up kswapd in settrackprepare CVE-2025-39843 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RHEL 9 : kernel (RHSA-2025:21926)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21926 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm: slub: avoid wake up kswapd in...

The vulnerability of the test_kmalloc_redzone_access() function in the lib/slub_kunit.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the testkmallocredzoneaccess function in the lib/slubkunit.c module of the Linux operating system is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the calculate_sizes() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the calculatesizes function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the writing of buffers outside of the system’s protected area. Exploiting this vulnerability could allow an attacker to damage memory resources or cause service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989267 advisory. In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988831 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slaballocnode assumes that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989325 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace lo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989714 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: actually fix freelist pointer vs redzoning It turns out that SLUB redzoning slubdebug=Z...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm: slub: Avoid waking up kswapd in settrackprepare settrackprepare may cause lock recursion. The issue arises because it is called from hrtimerstartrangens, which holds percpuhrtimerbasesn.lock. However, when...

EUVD-2025-31849

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

Linux Distros Unpatched Vulnerability : CVE-2025-39902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987014 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: actually fix freelist pointer vs redzoning It turns out that SLUB redzoning slubdebug=Z...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987388)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987388 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc fails In createuniqueid, kmalloc, GFPKERNEL can fail due...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987290 advisory. In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987258 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slaballocnode assumes that...

EUVD-2025-30357

Malicious code in bioql PyPI...

EUVD-2025-28956

Malicious code in bioql PyPI...

CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

...

CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...