DEBIAN-CVE-2025-40296

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulatorunregister already frees the associated GPIO device. On ThinkPad X9 Lunar Lake, this causes a double free issue that leads to random failures when...

CVE-2025-40323

CVE-2025-40323 pertains to the Linux kernel fbcon subsystem. The issue is a use-after-free (UAF) in framebuffer handling where, during framebuffer unregistration, only fb_info->modelist memory is freed and the corresponding fb_display[i]->mode is not NULL’d for the freed modes. This leaves ...

CVE-2025-40323 fbcon: Set fb_display[i]->mode to NULL when the mode is released

In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the following issue through syzkaller: BUG: KASAN: slab-use-after-free in fbmodeisequal+0x285/0x2f0 Read of size 4 at addr ff11000001b3c69c by...

CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...

AZL-70571 CVE-2025-61664 affecting package grub2 for versions less than 2.06-26

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normalexit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990925 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990891 advisory. In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnvphp: Fix hotplug driver crash on Powernv The hotplug driver for powerpc...

kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink().

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989155 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990204 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt...

CVE-2025-8558

Insider Threat Management ITM Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents t...

CVE-2025-8558

Insider Threat Management ITM Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents t...

PT-2025-51628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the cleanup of Precision Time Protocol PTP resources when a driver is removed, particularly in error scenarios. The problem arises from...

EUVD-2017-8049

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986523 advisory. In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnvphp: Fix hotplug driver crash on Powernv The hotplug driver for powerpc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987265 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period...

EUVD-2025-9397

Malicious code in bioql PyPI...

EUVD-2025-12921

Malicious code in bioql PyPI...

EUVD-2025-26767

Malicious code in bioql PyPI...

EUVD-2022-55134

Malicious code in bioql PyPI...