Linux Distros Unpatched Vulnerability : CVE-2023-54220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can produce error Unable to handle kernel paging request at virtual...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992969 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993113 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When trying to instantiate a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992790 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixe...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993165 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low...

Moxa NPort 5000 Series 安全漏洞

The Moxa NPort 5000 Series is a series of industrial-grade serial networking servers from Moxa Corporation of Taiwan, China. A security vulnerability exists in the Moxa NPort 5000 Series that stems from debugging code not being disabled in the UART interface, which could lead to unauthorized acce...

PT-2025-54287

A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interface and, without authentication, user interaction, or execution conditions, gain unauthorized access...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993084 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock port-lock when calling uarthandlectschange uarthandlectschange has to be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993231)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993231 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thawnoirq hook The following warning is seen with non-console UART...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992738)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992738 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: Fix refcount leak bug in uccuart.c In socinfo, offindnodebytype will return a node...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992907 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: Fix possible refcount leak in ifusbprobe usbgetdev will be called before...

EUVD-2023-60509

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: Fix shift-out-of-bounds in spinorseterasetype spinorseterasetype was used either to set or to mask out an erase type. When we used it to mask out an erase type a shift-out-of-bounds was hit: UBSAN: shift-out-of-boun...

EUVD-2023-60503

In the Linux kernel, the following vulnerability has been resolved: serial: 8250bcm7271: fix leak in brcmuartprobe Smatch reports: drivers/tty/serial/8250/8250bcm7271.c:1120 brcmuartprobe warn: 'baudmuxclk' from clkprepareenable not released on lines: 1032. The issue is fixed by using a managed...

EUVD-2023-60517

In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There maybe pending USR interrupt before requesting irq, however uartaddoneport has not executed, so there will be kernel panic: 0.795668 Unable to handle kernel NULL...

EUVD-2023-60421

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can produce error "Unable to handle kernel paging request at virtual address" about ten seconds after unloading the driver. This happens...

EUVD-2022-55920

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix musbgadget.c rxstate overflow bug The usb function device call musbgadgetqueue adds the passed request to musbep::reqlist,If the request-length musbep-packetsz and isbuffermappedreq return false,the rxstate will co...

EUVD-2022-55873

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...

CVE-2023-54301

In the Linux kernel, the following vulnerability has been resolved: serial: 8250bcm7271: fix leak in brcmuartprobe Smatch reports: drivers/tty/serial/8250/8250bcm7271.c:1120 brcmuartprobe warn: 'baudmuxclk' from clkprepareenable not released on lines: 1032. The issue is fixed by using a managed...

CVE-2023-54287

In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There maybe pending USR interrupt before requesting irq, however uartaddoneport has not executed, so there will be kernel panic: 0.795668 Unable to handle kernel NULL...

CVE-2023-54270

In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused by dosubmiturb There are UAF bugs caused by dosubmiturb. One of the KASan reports is shown below: 36.403605 BUG: KASAN: use-after-free in workerthread+0x4a2/0x890 36.406105 Read o...