Azure Linux 3.0 Security Update: kernel (CVE-2024-46846)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46846 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtim...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41088)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41088 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38081)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38081 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36930)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36930 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27028)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27028 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointe...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21793)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21793 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero Whe...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37801)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37801 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +9 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (6.0.1)

org.keycloak:keycloak-services MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.11 -...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +9 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (6.0.1)

org.keycloak:keycloak-services MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.11 -...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004010 advisory. A memory leak in the fsllpspiprobe function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004009 advisory. An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004238 advisory. An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and...

CVE-2025-68773

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002495 advisory. In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements...

CVE-2025-65396

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...

SUSE CVE-2025-68773

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

CVE-2025-65396: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...

CVE-2025-65396

A vulnerability in the boot process of Blurams Flare Camera (version 24.1114.151.929 and earlier) allows a physically proximate attacker to hijack the boot mechanism. By shorting a data pin of the IC to ground, an attacker can induce a read error from the SPI flash memory during boot to gain a bo...

AZL-74414 CVE-2025-68773 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

CVE-2025-68773

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...