OESA-2025-2634 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodesCurrently, loadmicrocodeamd iterates over all NUMA nodes, retrieves theirCPU masks and...

CVE-2025-54334

An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the npuvertexbootup function...

CVE-2025-52910

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation...

CVE-2025-54330

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q-bufs in the isdoneforme function...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989025 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpmtuprobefloor. While reading sysctltcpmtuprobefloor, it can ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990054 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989883 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps page tabl...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989176 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use after free ...

CVE-2025-54331

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of srchdr in the copyncpheader function...

CVE-2025-54331

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of srchdr in the copyncpheader function...

PT-2025-45046

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor and Wearable Processor Exynos 1280 Samsung Mobile Processor and Wearable Processor Exynos 2200 Samsung Mobile Processor and Wearable Processor Exynos 1330 Samsung Mobile Processor and Wearable Processor Exynos 1380...

CVE-2025-52910

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation...

PT-2025-45021

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions through July 2025 Description An out-of-bounds read issue exists in the NPU of Samsung Mobile Processor Exynos. Specifically, the issue resides in the is done for me function, involving a read of q-bufs...

PT-2025-45047

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 2500 Description A use-after-free issue exists in the Xclipse GPU Driver within the Samsung Mobile...

CVE-2025-54330

CVE-2025-54330 affects Samsung Mobile Processor Exynos 1380 (NPU) with an out-of-bounds read in the __is_done_for_me function, through July 2025. Vulnerable component: NPU inside the Exynos 1380 SoC. Impact as per CVSS: Medium (5.3), networked, requires no user interaction, no privileges. No fixe...

CVE-2025-54333

The CVE-2025-54333 issue is in Samsung Mobile Processor Exynos 1380’s NPU, described as an Invalid Pointer Dereference in the get_vs4l_profiler_node function. Connected sources (e.g., PT-2025-45024, Red Hat/NVD/CVE listings) corroborate the vulnerability but do not provide concrete exploit detail...

CVE-2025-54333

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the getvs4lprofilernode function...

PT-2025-45022

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 through July 2025 Description An issue exists in the NPU component of Samsung Mobile Processor Exynos. Specifically, an untrusted pointer dereference of src hdr occurs within the copy ncp header function...

PT-2025-45023

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions through July 2025 Description An issue exists in the NPU within Samsung Mobile Processor Exynos. A NULL pointer dereference occurs within the npu vertex profileoff function, specifically affecting...

Vulnerabilities fixed in Nagios XI

Nagios has fixed vulnerabilities in Nagios XI Versions before 2024R1.4.2 and 2024R2. The vulnerabilities include a remote code execution vulnerability within the Business Process Intelligence component, insufficient permissions on systemd unit files, unauthorized access to API keys, a command...