Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987174 advisory. In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, ...

EUVD-2025-25443

Malicious code in bioql PyPI...

EUVD-2025-22013

Malicious code in bioql PyPI...

EUVD-2025-27734

Malicious code in bioql PyPI...

EUVD-2021-34353

Malicious code in bioql PyPI...

EUVD-2021-34145

Malicious code in bioql PyPI...

EUVD-2022-43806

Malicious code in bioql PyPI...

EUVD-2025-26409

Malicious code in bioql PyPI...

CVE-2025-39919

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being...

PT-2025-49059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to inconsistent iterator handling within the enabled monitors seq ops callbacks. Specifically, some callbacks treat the iterator as a struct rv...

SUSE CVE-2023-53513

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer...

SUSE CVE-2025-39919

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being...

qt:qtbase_network_ssl_qsslcertificate_qsslcertificate_pem: Bad-cast to QObject from invalid vptr in QFactoryLoader::~QFactoryLoader

Detailed Report: https://oss-fuzz.com/testcase?key=5481058578792448 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbasenetworksslqsslcertificateqsslcertificatepem Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58d4bb024a40 Crash State: Bad-cast to QObjec...

PT-2025-44149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to the perf subsystem and specifically the arm spe component. A cast to unsigned long was implemented for the nr pages variable to...

SUSE CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

DEBIAN-CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

UBUNTU-CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

CVE-2025-39793 io_uring/memmap: cast nr_pages to size_t before shifting

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

CVE-2025-39793

Summary (CVE-2025-39793): In the Linux kernel io_uring/memmap path, the vulnerability arises when allocating memory where nr_pages may overflow during a shift if the size exceeds UINT_MAX. The root cause is failure to cast mr->nr_pages to size_t before shifting, which could allow overflow and ...