Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002909)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002909 advisory. The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which...

CVE-2025-66023

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Free UAF vulnerability within the MQTT bridge client component implemented via the underlying NanoNNG library. The vulnerability is triggered when NanoMQ acts as a bridge connecting ...

Linux Distros Unpatched Vulnerability : CVE-2023-54234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da scsi: mpi3mr: Add Event acknowledgment logic introduced an array mrioc-evtackcmds...

EUVD-2023-60407

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da "scsi: mpi3mr: Add Event acknowledgment logic" introduced an array mrioc-evtackcmds but initialization of the array elements was missed. They are just...

UBUNTU-CVE-2023-54234

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da "scsi: mpi3mr: Add Event acknowledgment logic" introduced an array mrioc-evtackcmds but initialization of the array elements was missed. They are just...

UBUNTU-CVE-2022-50865

In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcpaddbacklog The type of skrcvbuf and sksndbuf in struct sock is int, and in tcpaddbacklog, the variable limit is caculated by adding skrcvbuf, sksndbuf and 64 1024, it may exceed the ma...

CVE-2023-54234 scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da "scsi: mpi3mr: Add Event acknowledgment logic" introduced an array mrioc-evtackcmds but initialization of the array elements was missed. They are just...

PT-2025-52960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the RDMA/core component of the Linux kernel. Specifically, if the creation of an AH acknowledgement header request fails, the sgid attr is not released, leadin...

CVE-2025-68325 net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: Fix incorrect qlen reduction in cakedrop In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cakeenqueue, assumes that the parent qdisc will enqueue t...

curl: Heap Buffer Overflow in TFTP

Summary: A heap buffer overflow vulnerability exists in the TFTP implementation of libcurl. The vulnerability is triggered when a malicious TFTP server sends an OACK Option acknowledgment packet with a blksize option that is larger than the default block size 512 bytes. libcurl updates its intern...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990065 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas...

EUVD-2019-4928

Malware in sbrugna...

EUVD-2002-1096

Malware in sbrugna...

EUVD-2021-24764

Malware in sbrugna...

EUVD-2023-58764

Malicious code in bioql PyPI...

EUVD-2024-52226

Malicious code in bioql PyPI...

Ruckus Wireless ICX Switches Integer Overflow or Wraparound (CVE-2019-11477)

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs:...

The vulnerability of the QoSSetup() function in the /goform/QoSSetup file of the Linksys E1700 router’s microprogramming system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the QoSSetup function in the /goform/QoSSetup microprogramming software for Linksys E1700 routers is related to the operation of writing data outside of the buffer in memory when processing the ackpolicy parameter. Exploiting this vulnerability allows a remote attacker to...

ksmbd: fix potential use-after-free in oplock/lease break ack

...

Linux Distros Unpatched Vulnerability : CVE-2019-13455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...