Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680597 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able...

EUVD-2022-2834

Malicious code in bioql PyPI...

EUVD-2021-33972

Malicious code in bioql PyPI...

EUVD-2024-24524

Malicious code in bioql PyPI...

EUVD-2024-24512

Malicious code in bioql PyPI...

EUVD-2024-3000

Malicious code in bioql PyPI...

EUVD-2023-44586

Malicious code in bioql PyPI...

EUVD-2022-5579

Malicious code in bioql PyPI...

EUVD-2021-31073

Malicious code in bioql PyPI...

EUVD-2024-3173

Malicious code in bioql PyPI...

EUVD-2025-31955

Malicious code in bioql PyPI...

EUVD-2022-27106

Malicious code in bioql PyPI...

EUVD-2023-47102

Malicious code in bioql PyPI...

EUVD-2022-45078

Malicious code in bioql PyPI...

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

...

ROS-20250929-14

Vulnerability of the unixstreamreadgeneric function of the net/unix/afunix.c module of the Linux operating system kernel is related to memory usage after memory freeing. Exploitation of the vulnerability could allow an attacker to escalate privileges, bypass existing security mechanisms, and...

CVE-2025-39874

In the Linux kernel, the following vulnerability has been resolved: macsec: sync features on RTMNEWLINK Syzkaller managed to lock the lower device via ETHTOOLSFEATURES: netdevlock include/linux/netdevice.h:2761 inline netdevlockops include/net/netdevlock.h:42 inline netdevsynclowerfeatures...

Ubuntu: Security Advisory (USN-7758-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7758-4: Linux kernel (Oracle) vulnerability

It was discovered that the AFUNIX socket garbage collection implementation in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band OOB messages, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary...

USN-7758-3: Linux kernel (Real-time) vulnerability

It was discovered that the AFUNIX socket garbage collection implementation in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band OOB messages, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary...