CVE-2025-15020

The Gotham Block Extra Light plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.5.0 via the 'ghostban' shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on...

CVE-2025-71067

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

kernel: smb: client: Fix use-after-free in cifs_fill_dirent

A use-after-free flaw was found in cifsfilldirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

SUSE CVE-2025-68794

In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomapadjustreadrange assumes that the position and length passed in are block-aligned. This is not always the case however, as shown in the syzbot generated case...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002535 advisory. An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is call...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002654)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002654 advisory. An issue was discovered in fs/xfs/xfssuper.c in the Linux kernel before 4.18. A use after free exists, related to xfsfsfillsuper failure. Tenable has extracted the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003557 advisory. The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003241 advisory. The makeresponse function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003537 advisory. An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an blkdrainqueue use-after-free because a certain error case is mishandled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002546 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs imag...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003503 advisory. The blkcginitqueue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service double free or possibly have...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003348 advisory. The xenbiovecphysmergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002681 advisory. The xenbiovecphysmergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002106 advisory. Race condition in the smbsendrqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service NULL pointer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002235 advisory. Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003447 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003158 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in writeextentbuffer when mounting and operating a crafted btrfs image,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003287 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfsrootnode when mounting a crafted btrfs image, because of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002154 advisory. The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate...