Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989903 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989218 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988988 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi: bcm2835:...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43 – The property entry should be a null-terminated array. The software node does not specify a count of property entries; therefore, the array must be null-terminated. When this termination is omitted, it can lead to a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: Use devm function instead of driver remove The driver uses devm APIs to manage clk/irq/resources and register the spi controller. However, the legacy remove function is called first during device detachment, causin...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: A check is performed to determine whether the cfg variable is available in the stm32spiprobe function. The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not...

de.adorsys.sts:keycloak-storage-provider (0.29.0), dk.grinn.keycloak:keycloak-migrate-resource (0.0.5) +10 more potentially affected by CVE-2025-12390 via org.keycloak:keycloak-services (5.0.0)

org.keycloak:keycloak-services MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider 0.29.0 - dk.grinn.keycloak:keycloak-migrate-resource 0.0.5...

spi-qpic-snand DoS

The vulnerability of the spi-qpic-snand component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-53012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SPI subsystem, specifically within the tegra210-quad driver. Under conditions of high CPU load on the processor handling QSPI interrupts typically CPU...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.10), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-55754 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.10)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-55754 Source advisory: OSV:GHSA-VFWW-5HM6-HX2J...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.10), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-55752 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.10)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-55752 Source advisory: OSV:GHSA-WMWF-9CCG-FFF5...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.10), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-55754 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.10)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-55754 Source advisory: GHSA-VFWW-5HM6-HX2J...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.10), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-55752 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.10)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-55752 Source advisory: GHSA-WMWF-9CCG-FFF5...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.11), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-61795 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.11)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-61795 Source advisory: OSV:GHSA-HGRR-935X-PQ79...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.11), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.0.1) potentially affected by CVE-2025-61795 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.11)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.0.1 Source cves: CVE-2025-61795 Source advisory: GHSA-HGRR-935X-PQ79...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.108), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2025-55752 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.108)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2025-55752 Source advisory: GHSA-WMWF-9CCG-FFF5...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.40, <=9.0.108), org.apache.tomee:apache-tomee (>=8.0.6, <=8.0.16) +9 more potentially affected by CVE-2025-55754 via org.apache.tomcat:tomcat (>=9.0.40, <=9.0.108)

org.apache.tomcat:tomcat MAVEN version =9.0.40, =9.0.40, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =5.23.9, =8.0.0, =10.0.1 Source cves: CVE-2025-55754 Source advisory: OSV:GHSA-VFWW-5HM6-HX2J...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.40, <=9.0.108), org.apache.tomee:apache-tomee (>=8.0.6, <=8.0.16) +9 more potentially affected by CVE-2025-55754 via org.apache.tomcat:tomcat (>=9.0.40, <=9.0.108)

org.apache.tomcat:tomcat MAVEN version =9.0.40, =9.0.40, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =5.23.9, =8.0.0, =10.0.1 Source cves: CVE-2025-55754 Source advisory: GHSA-VFWW-5HM6-HX2J...

ROS-20251023-01

A vulnerability in the cifscomposemountoptions function of the fs/smb/client/cifsproto.h module of the SMB client support kernel of the Linux operating system is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a...

spi: cadence-quadspi: Implement refcount to handle unbind during busy

...