CVE-2022-50543

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix mr-map double free rxemrcleanup which tries to free mr-map again will be called when rxemrinituser fails: CPU: 0 PID: 4917 Comm: rdmaflushserv Kdump: loaded Not tainted 6.1.0-rc1-roce-flush+ 25 Hardware name: QEMU...

CVE-2022-50516

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sblvbptr I experience issues when putting a lkbsb on the stack and have sblvbptr field to a dangled pointer while not using DLMLKFVALBLK. It will crash with the following kernel message, the...

CVE-2022-50538

In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fakeinit In fakeinit, rootdeviceregister is possible to fail but it's ignored, which can cause unregistering vmeroot fail when exit. general protection fault, probably for non-canonical address...

CVE-2022-50518

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdciodcprint firmware call Utilize pdclock spinlock to protect parallel modifications of the iodcdbuf buffer, check length to prevent buffer overflow of iodcdbuf, drop the iodcretbuf buffer and fix some wro...

CVE-2022-50539

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4sraminit, offindcompatiblenode will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...

CVE-2022-50547

In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solosysfsinit If deviceregister returns error in solosysfsinit, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give up th...

CVE-2022-50511

In the Linux kernel, the following vulnerability has been resolved: lib/fonts: fix undefined behavior in bit shift for getdefaultfont Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds i...

CVE-2023-53623

In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swapinfostruct race between swapoff and getswappages The si-lock must be held when deleting the si from the available list. Otherwise, another thread can re-add the si to the available list, which can lead to memory...

EUVD-2021-27019

Malware in sbrugna...

EUVD-2021-11725

Malware in sbrugna...

EUVD-2019-13459

Malware in sbrugna...

Tenda AC20 安全漏洞

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the incorrect operation of the sscanf function parameter timeZone in the file /goform/fastsettingwifiset, for which no detailed vulnerability details are available at this ti...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986938 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dppanel DP CTS test case 4.2.2.6 has valid edid with bad...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936102 advisory. A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vffloodfill.c, which might lead to memory corruption and other potential consequences...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414492 advisory. A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987308 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi: bcm2835:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414642 advisory. An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987364 advisory. In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efxhardstartxmit Trying to get the channel from the txqueue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986303 advisory. In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in Sy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986499 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 net: hso: fix null-ptr-dere...