PT-2025-51643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/amdgpu subsystem that can lead to a GPU page fault after hibernation on PF passthrough environments. Specifically, after resuming from hibernation...

PT-2025-45078

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.68.6 Description The use of an insufficiently random value for the secretKey in Smart Switch allows nearby attackers to gain access to backup data from applications. Recommendations Update to version 3.7.68.6...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990378 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989843 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989269 advisory. In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix memory leak in presterarxtxswitchinit When presterasdmaswitchinit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989384 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perfcgroupswitch There's list corruption on cgrpcpuctxlist. This...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990302 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989094 advisory. In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988852)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988852 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: don't use devres for mdiobus As explained in commits: 74b6d7d13307 net: dsa:...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.68.6, which stems from a lack of randomization of the secretKey and could lead to an adjacent attacker accessing application backup data...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet: Device: am65-cpsw-nuss: Fixed the skb size by taking into account skbsharedinfo. While transitioning from netdevallocip Align to buildskb, memory for the “skbsharedinfo” member of an “skb” was not allocated...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53 – Do not enable EEE on bcm63xx The BCM63xx internal switches do not support EEE, but provide multiple RGMII ports through which external PHYs can be connected. If one of these PHYs is EEE-capable, we might attempt t...

CVE-2025-10150 Webserver crash caused by scanning on TCP port 80

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

[SECURITY] Fedora 43 Update: sssd-2.11.1-4.fc43

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

EUVD-2022-54578

In the Linux kernel, the following vulnerability has been resolved: net: dsa: qca8k: reset cpu port on MTU change It was discovered that the Documentation lacks of a fundamental detail on how to correctly change the MAXFRAMESIZE of the switch. In fact if the MAXFRAMESIZE is changed while the cpu...

net/mlx5: E-Switch, pair only capable devices

...

EUVD-2022-54895

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987558 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix freeing of uninitialized misc IRQ vector When VSI set up failed in i40eprobe as part of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987541 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perfcgroupswitch There's list corruption on cgrpcpuctxlist. This...

Cisco IOS Software Industrial Ethernet Switch Device Manager DoS (cisco-sa-ios-invalid-url-dos-Nvxszf6u)

This vulnerability occurs due to improper input validation in the device’s HTTP request handling. An attacker could exploit it by sending a specially crafted URL to the web interface, causing the device to crash and reload. Successful exploitation results in a denial-of-service DoS condition,...