12548 matches found
CVE-2025-68773
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002155)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002155 advisory. The xenfailsafecallback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003174 advisory. The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003486)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003486 advisory. The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allow...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002637)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002637 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002328)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002328 advisory. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linu...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002644)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002644 advisory. A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002217)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002217 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001838)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001838 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002531 advisory. The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003254)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003254 advisory. The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001942)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001942 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003475)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003475 advisory. The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service infinite loop and soft lockup via...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002180)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002180 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...
SEV-SNP Guest Stack Pointer Corruption Vulnerability
Summary Researchers have reported a CPU-caused stack corruption issue caused by flipping an undocumented MSR bit. AMD believes that this vulnerability occurs due to inadequate access controls, which fail to prevent the hypervisor from setting an internal configuration bit. This attack could allow...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001961)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001961 advisory. arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002516)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002516 advisory. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linu...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003178)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003178 advisory. The switchto function in arch/x86/kernel/process64.c in the Linux kernel does not properly context- switch IOPL on 64-bit PV Xen guests, which allows local guest OS...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002223)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002223 advisory. arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows...