CVE-2026-1449 Hisense TransTech Smart Bus Management System TireMng.aspx Page_Load sql injection

A flaw has been found in Hisense TransTech Smart Bus Management System up to 20260113. Affected is the function PageLoad of the file YZSoft/Forms/XForm/BM/BusComManagement/TireMng.aspx. Executing a manipulation of the argument key can lead to sql injection. It is possible to launch the attack...

PT-2026-4836

A flaw has been found in Hisense TransTech Smart Bus Management System up to 20260113. Affected is the function Page Load of the file YZSoft/Forms/XForm/BM/BusComManagement/TireMng.aspx. Executing a manipulation of the argument key can lead to sql injection. It is possible to launch the attack...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004953 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but...

EUVD-2026-4637

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...

SUSE CVE-2025-71154

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usbsubmiturb failure In asyncsetregisters, when usbsubmiturb fails, the allocated asyncreq structure and URB are not freed, causing a memory leak. The completion callback asyncsetregcb is...

CVE-2025-71154 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usbsubmiturb failure In asyncsetregisters, when usbsubmiturb fails, the allocated asyncreq structure and URB are not freed, causing a memory leak. The completion callback asyncsetregcb is...

CVE-2025-71154

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usbsubmiturb failure In asyncsetregisters, when usbsubmiturb fails, the allocated asyncreq structure and URB are not freed, causing a memory leak. The completion callback asyncsetregcb is...

CVE-2025-71145

In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301getclient helper only increases the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004863)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004863 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for mdiobusregister Shifting signed 32-bit value b...

The vulnerability of the fsl_otgremove() function in the drivers/usb/phy/phy-fsl-usb.c module of the Linux kernel allows a malicious actor to gain increased privileges.

The vulnerability of the fslotgremove function in the drivers/usb/phy/phy-fsl-usb.c module of the Linux kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to gain increased privileges...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004854)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004854 advisory. In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnpallocdev After commit 1fa5ae857bb1 driver core: get rid of struct...

PT-2026-4357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a device reference imbalance within the ISP1301 USB PHY driver. A recent fix for a device reference leak in a UDC driver introduced a potenti...

dataSIMS Avionics ARINC 664-1 security vulnerability

dataSIMS Avionics ARINC 664-1 is an aviation electronic bus testing and analysis tool developed by the British company dataSIMS. Version 4.5.3 of dataSIMS Avionics ARINC 664-1 contains a security vulnerability; this vulnerability stems from a local buffer overflow, which may allow for the executi...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38429)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38429 advisory. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36926)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36926 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics durin...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50055)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50055 advisory. - In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21776)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21776 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38004)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38004 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcmop runtime...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38110)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38110 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of- bound...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41097)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41097 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking ...